It's been along time for me but can someone tell me how to setup on my Windows Server 2003 privliges so users in a certain group can unlock or change passwords. Years ago I remember I was able to create a group and then assign rights like for Help Desk Admins but I have forgotten how.A million thanksJohn

You can do this by using the Delegate Controll in Active Directory.Just use Active Directory Users And Computers, select the OU(or thedomain if you want them to be able to reset any password)you want them to be able to controll and rightclick to get the option Delegate Control visible.After that the wizard is quite self explainatory so just follow the instructions and delegate the controll of resetting passwords and you'll be done. Easy as ABC ;)Mats

you can user taskpad entries for delegating several admin tasks in Active Directory like ResettinG Password, unlocking accounts, moving user and computers and lot more. Please see these links http://www.activedir.org/Articles/tabid/54/articleType/ArticleView/articleId/37/Default.aspx http://www.petri.co.il/create_taskpads_for_ad_operations.htmhttp://technetfaqs.wordpress.com

Hi John, As Mats has suggested, we can delegate the control of resetting passwords in Active Directory Users And Computers. During this process, you will find the default "common tasks" has the item: "Reset user passwords and force password change at next logon". However, there is no "Unlock Account Right". To delegate the Unlock Account Right, we need to create a custom task to delegate. Please refer to the "To delegate the right to a group or user" section on the following article. It works for Windows Server 2003. How To Delegate the Unlock Account Right http://support.microsoft.com/kb/294952/en-us Regards, Bruce