delegation Issue

Hi All,

I download Delegation Wizard template file from
http://technet.microsoft.com/en-us/l...84(WS.10).aspx

I copied the delegwiz.inf to my Windows 2003 server. I use Delegation Wizard
and select Reset a user account's password to delegate to user. After then,
when the user get to Active Directory Users and Computers, right click to
select Reset password, after typed password and click OK, get a error message:

Windows cannot complete the password change for Michael becasue: Access is
denied.

I checked the delegwiz.inf, it has the following: ( I think that I use the
following template. I am an new in delegation.)

;---------------------------------------------------------
[template49]
AppliesToClasses=domainDNS,organizationalUnit,cont ainer

Description = "Reset a user account's password"

ObjectTypes = user

[template49.user]

CONTROLRIGHT= "Change Password"
;----------------------------------------------------------

Is anybody know if the template file is for Windows 2003 server or for
Windows 2000 server?
Can anybody help me get a correct delegwiz.inf template file for Windows
2003 server? And how to fix my problem? thanks a lot.

--qq

Hello qq,

As you can see in the top of the article it is for 2003. You have to keep
in mind that domain user isn't able to reset a higher level account like
domain administrator.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi All,
>
> I download Delegation Wizard template file from
> http://technet.microsoft.com/en-us/l...84(WS.10).aspx
>
> I copied the delegwiz.inf to my Windows 2003 server. I use Delegation
> Wizard and select Reset a user account's password to delegate to user.
> After then, when the user get to Active Directory Users and Computers,
> right click to select Reset password, after typed password and click
> OK, get a error message:
>
> Windows cannot complete the password change for Michael becasue:
> Access is denied.
>
> I checked the delegwiz.inf, it has the following: ( I think that I use
> the following template. I am an new in delegation.)
>
> ;---------------------------------------------------------
> [template49] AppliesToClasses=domainDNS,organizationalUnit,cont ainer
>
> Description = "Reset a user account's password"
>
> ObjectTypes = user
>
> [template49.user]
>
> CONTROLRIGHT= "Change Password"
> ;----------------------------------------------------------
> Is anybody know if the template file is for Windows 2003 server or for
> Windows 2000 server?
> Can anybody help me get a correct delegwiz.inf template file for
> Windows
> 2003 server? And how to fix my problem? thanks a lot.
> --qq
>

I don't follow you here. The Delegation Wizard changes permissions in AD such
the the delegated user can reset the password for users in the delegated
container. I don't see where the inf file comes in.

The delegated user will need the Admin tools installed on his PC (or bits of
it).

On Tue, 17 Nov 2009 07:46:10 -0800, qq <> wrote:

>Hi All,
>
>I download Delegation Wizard template file from
>http://technet.microsoft.com/en-us/l...84(WS.10).aspx
>
>I copied the delegwiz.inf to my Windows 2003 server. I use Delegation Wizard
>and select Reset a user account's password to delegate to user. After then,
>when the user get to Active Directory Users and Computers, right click to
>select Reset password, after typed password and click OK, get a error message:
>
>Windows cannot complete the password change for Michael becasue: Access is
>denied.
>
>I checked the delegwiz.inf, it has the following: ( I think that I use the
>following template. I am an new in delegation.)
>
>;---------------------------------------------------------
>[template49]
>AppliesToClasses=domainDNS,organizationalUnit,con tainer
>
>Description = "Reset a user account's password"
>
>ObjectTypes = user
>
>[template49.user]
>
>CONTROLRIGHT= "Change Password"
>;----------------------------------------------------------
>
>Is anybody know if the template file is for Windows 2003 server or for
>Windows 2000 server?
>Can anybody help me get a correct delegwiz.inf template file for Windows
>2003 server? And how to fix my problem? thanks a lot.
>
>--qq
>
>
>
>
>
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.