Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

II would like to give a certain user (that will be used inside a program) access rights to Active Directory to be able to:

  1. Change passwords of other users
  2. Modify certain attributes of other users (like telephone number, title and so on)

How to prepare such limited user in Active Directory 2003?

share|improve this question
up vote 2 down vote accepted

If you right click the the domain root in Active Directory Users and Computers select "Delegate Control...". It will bring up a wizard you can use to grant custom rights to the domain objects for that user account.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.