Help Desk Change Passwords Only?

[govols]

Is there a way to grant ability to my Help Desk personnel to change NT domain passwords for users but not have full domain admin rights?

 

[ensorg]

You can make the helpdesk a member of the Accounts Operator's group, this will enable them to change password's as well as create, delete, rename, etc accounts and groups.

A good idea before using the Account Operators group is to go through the user rights and make sure the group is not allowed to do anything more i.e. Log on Locally or Shut down the system.

 

[govols]

Thank You