[MASOCH-L] Active Directory e os usuarios com senha.

[Andre' Franciosi]

Jose,

Jose de Paula Eufrasio Junior wrote:
> Olá pessoas, preciso fazer com que pessoas do helpdesk consigam
> resetar e desbloquear senhas de usuários, sem precisar dar privilegios
> e tal para os minions do helpdesk. Existe alguma coisa já pronta e tal
> que possam me indicar?

Crie um grupo para o pessoal do Helpdesk e após insira o grupo criado no 
grupo Account Operators. Não há problema em se visualizar todo o AD, 
visto que as permissões estarão reduzidas.

"Members of this group can create, modify, and delete accounts for 
users, groups, and computers located in the Users or Computers 
containers and organizational units in the domain, except the Domain 
Controllers organizational unit. Members of this group do not have 
permission to modify the Administrators or the Domain Admins groups, nor 
do they have permission to modify the accounts for members of those 
groups. Members of this group can log on locally to domain controllers 
in the domain and shut them down. Because this group has significant 
power in the domain, add users with caution."

Default groups
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/1631acad-ef34-4f77-9c2e-94a62f8846cf.mspx

fr

-- 
André Franciosi
Consultor em TI
[0x15C50B90, pgp.mit.edu]

Franciosi Consultoria
http://www.franciosi.org