Page 1 of 1 1
Topic Options
#34238 - 2002-12-06 04:25 PM NT Admin delegation
BrianK Offline
Getting the hang of it

Registered: 2002-10-02
Posts: 90
Loc: Amsterdam, The Netherlands
Hi,

In our company the need has arisen to delegate some admin tasks. For starters, the delegated account should be able to reset passwords.

NT has the built-in group Account Operators, but this grants too many rights.

Is there a kixform or something like this, what can do this, or will I have to resolve to a third party solution?

Thanks in advance.
Brian
_________________________
Rodney Dangerfield: “My mother didn't breast-feed me. She said she liked me as a friend.”

Top
#34239 - 2002-12-06 04:56 PM Re: NT Admin delegation
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
This has nothign to do with KiXForms, it's more an authentication issue.

Basically, you wan to run the script under regular domain usewr account, but the actual password reste action needs to be performed under administratvie privileges.

Solution: Authenticate against the ADSI provider from within the script as an administrator and perform the desired action. However, you'll need to find a secure way to store/retrieve the admin password.

Thisi is the reason why I want KiXtart to support the Windows Crypto Provider.
_________________________
There are two types of vessels, submarines and targets.

Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 1045 anonymous users online.
Newest Members
ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder, M_Moore
17887 Registered Users

Generated in 0.061 seconds in which 0.029 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org