委派密码重置的最佳方法 [英] Best method for delegating password resets

问题描述

大家好，



我希望开发一个ASP.Net应用程序，允许用户为他们经理的任何人重置Windows域密码。例如：销售经理可以重置他在Active Directory中列为管理员的任何人的密码。



我想知道最好的方法是什么访问Active Directory的条款。我是否应该创建一个我使用我的代码调用的服务帐户，是否应该让所有用户都能访问重置AD密码（他们无法在终端上安装软件 - 如RSAT - 这样看起来很安全），或者我应该使用第三种方法我不知道？



如果有人可以请告诉我最好的解决办法，这将是很棒的。



谢谢！

Hi guys,

I am looking to develop an ASP.Net application that will allow a user to reset Windows domain passwords for anyone they are the manager of. For example: sales manager can reset the password of anyone he is listed as a manager of in Active Directory.

I was wondering what the best way to do this was in terms of accessing Active Directory. Should I have a service account created which I call using my code, should I give all users access to reset AD passwords (they are unable to install software - like RSAT - on their terminals so this seems pretty safe), or should I use a third method I am not aware of?

If anyone could please tell me the best solution for this that would be great.

Thanks!

推荐答案

在开始编程之前你可能想做一些功课，看看ActiveDirectory是否允许你这样做。



我非常怀疑。

You might want to do some homework before starting any programming and see if ActiveDirectory even allows you to do that.

I seriously doubt it.

这篇关于委派密码重置的最佳方法的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！