MonitorWare Knowledge Base

We have a group of Support personel that we do not want to add to the Domain Admins group. We only want them to be able to reset Domain users account passwords and install various software apps on end-users computers. What is the easiest and most efficient way to achieve this?

My thought is to use a GP (Group Policy) to limit them to the software installs portion, but what can I do for the password resetting criteria? Would it be feasable to say, put them in the Account Operators Group and then use a GP to restrict them down to where I want them?

Any help would be greatly appreciated.

If you can, could you reply to this e-mail address - The_Matrix@comcast.net

Thank you