Ok, first time poster long time lurker. Here's my question.
How do I make it so a OU admin (Each OU has a group acl'd to full control of user objects/computer objects etc inside that OU) so that they can't check the Password never expirers check box? I would like if possible to JUST take away the right for hem to use that check box in the MMC. //jason List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/