Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » AD on XP/Limit Activities
AD on XP/Limit Activities [message #159024] Wed, 22 July 2009 19:29 Go to next message
Diane  is currently offline Diane
Messages: 42
Registered: July 2009
Member
win2K/SP4 Domain/AD, WinXP/SP3 Pro Client

Hello -

I generally do not work with AD, so please excuse me as I think this is a
very basic question. I need to install AD on a user's system so they can
take care of some admin tasks only for desktop users (e.g. unlocking
accounts). They are not to be allowed to change passwords. Can someone
please help direct me to the AD software I need to download to install on the
XP desktop (is it just AD as installed on the DC?), and more importantly how
to create a subset of the AD that only contains the desktop users with the
password change capability removed? I have searched and cannot seem to find
an appropriate reference.

Thanks very much for all help and guidance.
Re: AD on XP/Limit Activities [message #159025 is a reply to message #159024] Wed, 22 July 2009 19:33 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello Diane,

To manage AD from a client workstation you have to use the adminpak.msi,
available on the 2003 server for XP machines. After that you have to delegate
control for the needed tasks.

See here about delegating some basic tasks:
http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369. aspx

http://support.microsoft.com/kb/294952/en-us

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> win2K/SP4 Domain/AD, WinXP/SP3 Pro Client
>
> Hello -
>
> I generally do not work with AD, so please excuse me as I think this
> is a very basic question. I need to install AD on a user's system so
> they can take care of some admin tasks only for desktop users (e.g.
> unlocking accounts). They are not to be allowed to change passwords.
> Can someone please help direct me to the AD software I need to
> download to install on the XP desktop (is it just AD as installed on
> the DC?), and more importantly how to create a subset of the AD that
> only contains the desktop users with the password change capability
> removed? I have searched and cannot seem to find an appropriate
> reference.
>
> Thanks very much for all help and guidance.
>
Re: AD on XP/Limit Activities [message #159033 is a reply to message #159024] Thu, 23 July 2009 02:26 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Diane schrieb:
> I generally do not work with AD, so please excuse me as I think this is a
> very basic question. I need to install AD on a user's system so they can
> take care of some admin tasks only for desktop users (e.g. unlocking
> accounts). They are not to be allowed to change passwords. Can someone
> please help direct me to the AD software I need to download to install on the
> XP desktop (is it just AD as installed on the DC?),

Check the AdminPak.MSI for Server 2003/XP machines and RSAT for Server
2008 and Vista/Win7 installations.

> and more importantly how
> to create a subset of the AD that only contains the desktop users with the
> password change capability removed? I have searched and cannot seem to find
> an appropriate reference.

Users shall not be able to change their own passwords? You can select
all those users and right-click them and choose "properties". After
that, you can use the "Account" tab (not sure about that tab) and choose
"User can change password" box.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: AD on XP/Limit Activities [message #159047 is a reply to message #159025] Thu, 23 July 2009 09:30 Go to previous messageGo to next message
Diane  is currently offline Diane
Messages: 42
Registered: July 2009
Member
Hello Meinolf!

Thank you for your help. My DC is windows 2000, is the process the same as
for 2003? I will check for the adminpak.msi on the server and review the
links you sent. They will give me a starting point.

Cheers,

Diane

"Meinolf Weber [MVP-DS]" wrote:

> Hello Diane,
>
> To manage AD from a client workstation you have to use the adminpak.msi,
> available on the 2003 server for XP machines. After that you have to delegate
> control for the needed tasks.
>
> See here about delegating some basic tasks:
> http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369. aspx
>
> http://support.microsoft.com/kb/294952/en-us
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > win2K/SP4 Domain/AD, WinXP/SP3 Pro Client
> >
> > Hello -
> >
> > I generally do not work with AD, so please excuse me as I think this
> > is a very basic question. I need to install AD on a user's system so
> > they can take care of some admin tasks only for desktop users (e.g.
> > unlocking accounts). They are not to be allowed to change passwords.
> > Can someone please help direct me to the AD software I need to
> > download to install on the XP desktop (is it just AD as installed on
> > the DC?), and more importantly how to create a subset of the AD that
> > only contains the desktop users with the password change capability
> > removed? I have searched and cannot seem to find an appropriate
> > reference.
> >
> > Thanks very much for all help and guidance.
> >
>
>
>
Re: AD on XP/Limit Activities [message #159049 is a reply to message #159047] Thu, 23 July 2009 09:34 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello Diane,

Adminpak you can use form the 2000 server, make sure SP4 is intalled and
also the latest patches.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello Meinolf!
>
> Thank you for your help. My DC is windows 2000, is the process the
> same as for 2003? I will check for the adminpak.msi on the server and
> review the links you sent. They will give me a starting point.
>
> Cheers,
>
> Diane
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Diane,
>>
>> To manage AD from a client workstation you have to use the
>> adminpak.msi, available on the 2003 server for XP machines. After
>> that you have to delegate control for the needed tasks.
>>
>> See here about delegating some basic tasks:
>> http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369. aspx
>> http://support.microsoft.com/kb/294952/en-us
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> win2K/SP4 Domain/AD, WinXP/SP3 Pro Client
>>>
>>> Hello -
>>>
>>> I generally do not work with AD, so please excuse me as I think this
>>> is a very basic question. I need to install AD on a user's system
>>> so they can take care of some admin tasks only for desktop users
>>> (e.g. unlocking accounts). They are not to be allowed to change
>>> passwords. Can someone please help direct me to the AD software I
>>> need to download to install on the XP desktop (is it just AD as
>>> installed on the DC?), and more importantly how to create a subset
>>> of the AD that only contains the desktop users with the password
>>> change capability removed? I have searched and cannot seem to find
>>> an appropriate reference.
>>>
>>> Thanks very much for all help and guidance.
>>>
Re: AD on XP/Limit Activities [message #159052 is a reply to message #159033] Thu, 23 July 2009 09:38 Go to previous messageGo to next message
Diane  is currently offline Diane
Messages: 42
Registered: July 2009
Member
Hello Florian!

Thank you! I admit I'm nervous about AD changes. Don't want to break
something that causes havoc -):

Diane

"Florian Frommherz [MVP]" wrote:

> Howdie!
>
> Diane schrieb:
> > I generally do not work with AD, so please excuse me as I think this is a
> > very basic question. I need to install AD on a user's system so they can
> > take care of some admin tasks only for desktop users (e.g. unlocking
> > accounts). They are not to be allowed to change passwords. Can someone
> > please help direct me to the AD software I need to download to install on the
> > XP desktop (is it just AD as installed on the DC?),
>
> Check the AdminPak.MSI for Server 2003/XP machines and RSAT for Server
> 2008 and Vista/Win7 installations.
>
> > and more importantly how
> > to create a subset of the AD that only contains the desktop users with the
> > password change capability removed? I have searched and cannot seem to find
> > an appropriate reference.
>
> Users shall not be able to change their own passwords? You can select
> all those users and right-click them and choose "properties". After
> that, you can use the "Account" tab (not sure about that tab) and choose
> "User can change password" box.
>
> Cheers,
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
>
Re: AD on XP/Limit Activities - MMC Issues [message #159073 is a reply to message #159049] Thu, 23 July 2009 15:56 Go to previous message
Diane  is currently offline Diane
Messages: 42
Registered: July 2009
Member
Hello Again,

Hope you can help on this! On the XP system, I get the message "MMC could
not create the snap-in". I have tried various versions of the adminpak with
no luck, and tried installing via the admin account and then a user admin
account. Also searched for a fix but no luck. I saw fixes for Vista that
mentioned registration issues, but could find nothing similar for XP. MMC
3.0 is on the system.

Thanks Again,

"Meinolf Weber [MVP-DS]" wrote:

> Hello Diane,
>
> Adminpak you can use form the 2000 server, make sure SP4 is intalled and
> also the latest patches.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hello Meinolf!
> >
> > Thank you for your help. My DC is windows 2000, is the process the
> > same as for 2003? I will check for the adminpak.msi on the server and
> > review the links you sent. They will give me a starting point.
> >
> > Cheers,
> >
> > Diane
> >
> > "Meinolf Weber [MVP-DS]" wrote:
> >
> >> Hello Diane,
> >>
> >> To manage AD from a client workstation you have to use the
> >> adminpak.msi, available on the 2003 server for XP machines. After
> >> that you have to delegate control for the needed tasks.
> >>
> >> See here about delegating some basic tasks:
> >> http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369. aspx
> >> http://support.microsoft.com/kb/294952/en-us
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> win2K/SP4 Domain/AD, WinXP/SP3 Pro Client
> >>>
> >>> Hello -
> >>>
> >>> I generally do not work with AD, so please excuse me as I think this
> >>> is a very basic question. I need to install AD on a user's system
> >>> so they can take care of some admin tasks only for desktop users
> >>> (e.g. unlocking accounts). They are not to be allowed to change
> >>> passwords. Can someone please help direct me to the AD software I
> >>> need to download to install on the XP desktop (is it just AD as
> >>> installed on the DC?), and more importantly how to create a subset
> >>> of the AD that only contains the desktop users with the password
> >>> change capability removed? I have searched and cannot seem to find
> >>> an appropriate reference.
> >>>
> >>> Thanks very much for all help and guidance.
> >>>
>
>
>
Previous Topic:Delete files
Next Topic:Cannot resolve a hostname from another trusted forest
Goto Forum:
  


Current Time: Fri Oct 20 10:20:11 EDT 2017

Total time taken to generate the page: 0.07260 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software