[MASOCH-L] Active Directory e os usuarios com senha.
Andre' Franciosi
andre at franciosi.org
Thu Nov 17 10:34:25 -03 2005
Jose,
Jose de Paula Eufrasio Junior wrote:
> Olá pessoas, preciso fazer com que pessoas do helpdesk consigam
> resetar e desbloquear senhas de usuários, sem precisar dar privilegios
> e tal para os minions do helpdesk. Existe alguma coisa já pronta e tal
> que possam me indicar?
Crie um grupo para o pessoal do Helpdesk e após insira o grupo criado no
grupo Account Operators. Não há problema em se visualizar todo o AD,
visto que as permissões estarão reduzidas.
"Members of this group can create, modify, and delete accounts for
users, groups, and computers located in the Users or Computers
containers and organizational units in the domain, except the Domain
Controllers organizational unit. Members of this group do not have
permission to modify the Administrators or the Domain Admins groups, nor
do they have permission to modify the accounts for members of those
groups. Members of this group can log on locally to domain controllers
in the domain and shut them down. Because this group has significant
power in the domain, add users with caution."
Default groups
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/1631acad-ef34-4f77-9c2e-94a62f8846cf.mspx
fr
--
André Franciosi
Consultor em TI
[0x15C50B90, pgp.mit.edu]
Franciosi Consultoria
http://www.franciosi.org
More information about the masoch-l
mailing list