I can't figure out how to reset other users passwords in the 2010 ECP. Seems like that should be the first and most obvious purpose of ECP doesn't it? Even with all my permissions as the ultimate admin the option does not appear. I assigned myself to the help desk group and still the option to reset a users password does not appear when managing another user. I can change his name and GAL details but can't reset his password. The tech articles around RBAC, understanding management roles and role groups are long and involved and fail to cover the one most basic thing an admin wants to do. I need to assign permissions so a help desk person can reset other users passwords, using the ECP. Can someone please point me to some simple directions about how to enable that permission for the built in help desk role group, or better yet, how to create a new group and assign that role or permission to the new group. I'm gonna need step by step apparently. Thanks.

Hi, Base on my experience, it is impossible. We can allow admin to reset password from remote powershell or from ADUC, or access the user mailbox and then reset the password. Active Directory Cmdlets in Windows PowerShell http://technet.microsoft.com/en-us/library/ee617195.aspx Set-ADAccountPassword http://technet.microsoft.com/en-us/library/ee617261.aspx Regards, Xiu

Thanks for the reply. I think that's completely amazing. With all the marginally useful ____ they built into that tool, they purposely left out the one feature it really needed. Can we put this down as a suggestion? Bill

Hi, I think could be the workaround. But be careful to grant the proper permission for help desk to do that. Regards, Xiu