Are those accounts members of some default MS admin groups? (e.g. domain admins, account operators, etc.)
#JORGE# -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bruyere, Michel Sent: maandag 9 mei 2005 22:22 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Strange problem Hi, I delegated the password management to the technicians group. There is a glitch though, they can't seem to be able to reset password even if I gave the permission to do so (on the OU). All the get is Access denied (and the check box to set the "change password a next logon" bit is grayed. The permissions have been set in the security tab, using the Advanced view of ADUC. Here are the security settings for the Technicians group: reset password change password read pwdLastSet write pwdLastSet read LockoutTime write LockoutTime read accountrestrictions What I'm missing here? Thanks List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
