Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We're looking for a simple web based admin tool to allow trusted users to create windows user accounts via a web based interface. It should also give regular users the ability to change their passwords.

I'm familiar with IISADMPWD from IIS 6, which is very clunky and only provides the ability for users to change their passwords.

Does anyone know of a third party tool that provides a web UI to manage user accounts? I know you can do this via remote desktop, but for a simple task like user creation it would be great if it could be handled remotely using a simpler interface.

Thanks,

Darren.

share|improve this question

closed as off-topic by Michael Hampton Feb 21 at 3:37

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – Michael Hampton
If this question can be reworded to fit the rules in the help center, please edit the question.

    
A very interesting question. The idea of being able to administer users via a web interface is a nice idea and could be very useful if you had administrators outside of your normal organisation. –  Kip Sep 11 '09 at 11:14

4 Answers 4

I believe Quest ActiveRoles product line can do this. I can't recall offhand though if it is web-based or not for the user provisioning. And it isn't cheap.

Another solution for free would be to install the adminpak tools, give them the proper delegated rights in ADUC, and then create a custom based MMC console for them to use for ADUC like below:

c/p from another site:

  1. Open mmc - File - Add/Remove Snap-in - Add - select ADUC - Add - Close - OK.
  2. Select desired OU - right click on OU - New Window from here.
  3. After that limit user access to only that window: File - Options - Console mode: User mode - limited access, single window.
  4. Save console: File - Save As
  5. Test console
  6. Give console (msc file) to user
share|improve this answer
    
ActiveRoles is an excellent tool, but as you say, it isn't cheap. –  Izzy Sep 10 '09 at 20:49

Have a look at ADManager Plus. It isn't as expensive as ActiveRoles, but it will do everything you requested, plus a whole lot more. Plus, there's a 30 day free trial!

We've been using it for a while now to manage several domains and have no complaints.

share|improve this answer

Users can change their own passwords by doing a 3 finger salute (cntrl-alt-del) and selecting change password, no special software needed.

As for the admin, unless you really need a web-interface, what is wrong with AdminPak?

share|improve this answer

For the first part, allowing trusted users to create windows user accounts, create a Taskpad, which is a regular, Windows supported, way to do what you want. It allows you to give the trusted users fine-grained permissions for the task. Details can be found here, here, and here (use Google for more).

For the password change part, users can already do that. Just educate them, there is no need for added complexity on your part.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.