Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need a user friendly way for non-technical people to reset another persons password in Active Directory.

The use case for this is a school where the lab supervisors need the ability to reset a students password without involoving the already overburdened IT staff.

The requirements:
- I can't have them going into AD Users and Computers or using a command line.
- If the username is entered by selecting from a list, it should only list users in a subset of OUs, and the OU configuration should not be visible to the end user.

Is there a tool like this that exists.

share|improve this question

closed as off topic by SvW, mdpc, Stefan Lasiewski, Ward, Khaled Feb 19 '13 at 7:58

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
Could I ask why you're ruling out ADUC? If you grant only the necessary permissions on AD objects/attributes, they won't be able to do any damage and it's a pretty simple, straight-forward interface. –  EEAA Aug 23 '10 at 2:56
1  
@ErikA We tried ADUC. It's a simple, straight-forward interface for people on this site, not for your average lab tech. –  Eric Haskins Aug 23 '10 at 3:03
    
At my $WORK, we teach normal, very much non-technical office admin assistants to use ADUC for various tasks. I'd question if these folks are really up to the task of supervising a lab if they're not able to grok ADUC. –  EEAA Aug 23 '10 at 3:09
add comment

2 Answers 2

up vote 1 down vote accepted

I found a tool called Password Control, by WiseSoft. It works very well and is easy for users to understand. It has a configuration file that you can modify to enable/disable various GUI controls and default values. It obviously requires the proper delegation permissions that ADUC would require, but it's simpler for a non-technical user to grasp.

I believe it meets your second criteria by requiring entering the username and does not allow selecting from a list. I don't recall exactly, as I haven't had to assist anyone after initially training people.

share|improve this answer
    
Exactly what I need. Thank you. –  Eric Haskins Oct 7 '10 at 19:12
add comment

If you or someone on the I.T. staff can build asp.net apps, you can build a relatively straightforward website for the lab supervisors to use in resetting passwords. You can also visit here.

ManageEngine also makes some pretty useful tools. You might take a look at their ADSelfService Plus software.

But really, I'd have to agree with most everyone else. How hard can it be to right-click a user name and reset password? o_O

alt text

alt text

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.