Local Account Password Reset

From: DavidM (scandal_123_at_cox.net)
Date: 12/29/03 

Date: Mon, 29 Dec 2003 01:51:23 GMT

Hello --

We have a bunch of standalone W2K machines with many local accounts. These
accounts cannot reside on our ActiveDirectory domain and therefore must stay
local.

We're shifting responsibility of administrating users for unlocking accounts
or resetting user passwords from our Tech Support department who maintain
the servers, to our Customer Support department who handle customer calls.

What is the best way for me to allow non-Admin level customer support folks
to unlock or reset local accounts on a few standalone servers? The Customer
Support folks typically never access these servers directly for anything.
SO no drive mappings or logins.

Is there third party products that allow this via a web console?

I do not want to make all my customer support folks Admins to each local
box; nor have the extra burdon of creating more local accounts for the 25+
customer support personnel.

For audit purposes, using a single account for all customer support folks is
not an option.

Furthermore, I do not wish to allow customer support to login, as this will
create a new profile folder locally for each user. Thus take more space on
the server needlessly.

Any ideas, help, or comments would be appreciated.

http://www.micro-mess.com
http://www.va-mustang.com
If you wish to reply to me personally, please remove
the "underline" from scandal_123@cox.net. The is done to avoid SPAM!

Relevant Pages

  • Re: Local user accounts disappear when moving member server to new domain (and forrest)
    ... Having moved literally hundreds of servers between domains I have never seen anything happen to local accounts. ... Both the old and new domains have Windows Server 2003 systems as the DCs. ... They've been using local user accounts on the Win2K TS servers for the terminal services users. ... the two domains are in different forrests as well. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to change PASSWORD expiration settings with command line?
    ... I have several LOCAL accounts created and i wanna to disable PASSWORD ... expiration via Script ... I found a Script (Modify a Local User Account So It Never Expires) in ... Servers that are not DC's do have local accounts. ...
    (microsoft.public.windows.server.scripting)
  • Re: Adding a Domain, child or someghing....
    ... Also Note that you can have member servers with local accounts instead of Domain Accounts. ... For example you could have a Web site server with Local accounts instead of using AD Accounts. ... Is there a way to use our Existing DCs to create another domain or child or something that would allow central administration of the users with out giving them access to resources in our AD Domain? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account / user management
    ... > management software for multiple linux servers. ... LDAP, so you might want to get your hands on a copy if you can. ... -Use local accounts for things like apache, oracle, etc. so they don't ... -Agree on what UID and GID range that LDAP will use and what range local ...
    (comp.os.linux.misc)