Here it is:
Set these to the UO for the group/user you want
* allow Reset Password permission for user objects-grants permission to
reset an account's password
* allow Write lockoutTime permission for user objects-grants permission to
unlock an account
* allow Write pwdLastSet permission for user objects-grants permission to
set User must change password at next logon account property
* allow Read AccountRestrictions permission for user objects-grants
permission to read all account options
> -----Message d'origine-----
> De : [EMAIL PROTECTED] [mailto:ActiveDir-
> [EMAIL PROTECTED] De la part de Francis Ouellet
> Envoyé : Tuesday, March 22, 2005 2:54 PM
> À : ActiveDir@mail.activedir.org
> Objet : RE: [ActiveDir] Ad delegation
>
> Hi Michel,
>
> Care to explain the steps you took?
>
> Thanks!
> Francis
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Bruyere, Michel
> Sent: 22 mars 2005 14:45
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Ad delegation
>
> Solved...
>
>
> > I would like to delegate 3 actions to the technicians in the AD. The 2
>
> > first are easy to set, the third is the one that cause me a problem.
> >
> > 1- reset the users password
> > 2- set the "must change password at next logon"
> > 3- enable account that was disabled due to the password policy (locked
>
> > after bad attempts)
> >
> > I looked in the security and the delegation tabs and I never saw
> > anything concrete about it.
> >
> > Anyone has an idea on how to achieve it?
> >
> > BTW it's a Win2k native domain.
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
