Hi, I'd like to provide one of our non admin staff members with limited privileges on a single OU in AD. i.e. Specifically allowing her to change domain account passwords for only those employees in her department. (Same OU) Can this be done? If so, how? Thanks

Hi, This can be done by setting up delegates, have a look at the following article: http://support.microsoft.com/?kbid=315676 Regards, Johan blog: www.johanveldhuis.nl

Hello, Additionally you can check below article to set up delegation for account lockouts and password resets. You may also create a custom MMC task pad, lock down and give it to user. http://sysadminhell.blogspot.com/2008/02/account-lockouts-and-password-resets.html However, this is Exchange Server Admin forum, suggest you to post your query in Windows 2003 NewsGroup to get faster and better responses. Windows 2003 NewsGroup: http://technet.microsoft.com/en-us/windowsserver/bb841405.aspx