OU permissions

Rising Flight 4,816 Reputation points
2024-01-10T22:19:11.1766667+00:00

Hi All i have an account lets say user1 and i want to give this user permission to reset password or change password on a particular OU. when i right click on the OU-->properties-->security-->Add-->selected user1-->Except read permission removed all permissions-->Clicked on Advanced-->Double clicked user1 and i am unable to see password reset permission. please guide me. If i right click OU and delegate control it is possible but i am trying with the first approach.

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,903 questions
Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,574 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,877 questions
0 comments No comments
{count} votes

Accepted answer
  1. Thameur-BOURBITA 35,511 Reputation points
    2024-01-10T22:47:13.88+00:00

    Hi @Rising Flight I think I understood your issue and found the solution. You have to select Descendant User objects , to display Change and reset password permission under OU properties -> security -> Advanced User's image

    ---Please don't forget tp accept helpful answer

    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    1 deleted comment

    Comments have been turned off. Learn more

  2. Daisy Zhou 29,071 Reputation points Microsoft Vendor
    2024-01-11T03:42:45.28+00:00

    Hello Khushi,

    Thank you for posting in Q&A forum.

    You can try the steps below:

    1.Right click OU and select Delegate Control and click Next.
    2.Add the user, such as user1 and click Next.
    User's image

    3.Click "Create a custom task to delegate" and click Next. User's image

    4.Click "Only the following objects in the folder" and check the "user objects" and click Next. User's image

    5.Check the options below:
    General
    Property-specific Creation/deletion of specific child objects.
    Change password
    Reset password User's image

    6.Check if you can reset/change the password within the OU using the account you set.

    I hope the information above is helpful. If you have any questions or concerns, please feel free to let us know.

    Best Regards, Daisy Zhou  

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.