User Delegation

[Guest]

Dear All :
I need to publish Hyena through Citrix , and I need to make some <span style="font-weight: bold">non administrator</span> users to control <span style="font-weight: bold">some</span> administrator functions ..
specially reset passwords for Domain Users ..
So I need to :

1. Let the users reset another users' passwords
   
2. Show only User Management Menu in Hyena Software and no other Menus should be appear !

Thanks ,,

[cmccullough]

Re: User Delegation

You can restrict what users see to a certain extent using the Node Manager under File->Manage Object View->Nodes. Experiment with that to see if you can restrict is as much as you need.

This is controlled by a file called ad_nodes.dat, so once you get it the way you want you can set security on that file to keep users from changing it back.

[Guest]

Re: User Delegation

How can I remove teh Main Menu from the software ?
I need to just show up the Tree of the Users Tab ...

[cmccullough]

Re: User Delegation

I don't believe you can remove the main menu. Using the View menu you can hide the toolbar and the status bar.

[Guest]

Re: User Delegation

Yes , but any un-administartor user will be able to unhide the menues and the tools again !!!

[cmccullough]

Re: User Delegation

Hyena is intended as an administrative utility, and as such isn't designed to be locked down beyond a certain extent. You can use the information I gave above to hide certain objects, and then set the ad_nodes.dat file so it can't be written to. With security set this way they won't be able to make changes to the Nodes list because it won't save.

[Trammel]

Re: User Delegation

Like they said Heyna wasn't meant to be locked down. Not to mention that Hyena is profile specific. Meaning they wouldn't get the things you see or want. You would practicly have to load it in the default.nt user profile so that when they logged on they would get it.
I would suggest just putting a shortcut to dsa.msc on the all users desktop. Just as easy to go reset passwords. You can right click on the OU of your liking and delegate the password reset only. This would then accomplish the right's or lock down thing you want to do.
Do some reading on createing mmc snapins for others. You can then create a custom one of your liking.

[This message has been edited by Trammel (edited 01-28-2005).]