We currently host applications that we develop in house for our customers. We Active Directory for the user accounts and we allow an admin at each customer to create new AD accounts for their users. We do this by using Citrix to publish Active Directory
Users & Computers.
While I would like a more elegant solution, my chief concern right now is that I want the customer admin to be able to unlock accounts, but not set the PasswordNeverExpires flag.
It seems like I could accomplish this with MPS if I understand it properly, but implementing MPS would be a LOT of work for just this one feature.
Is MPS the right solution? Are there simpler alternatives that would allow us to delegate AD account management?
seaJhawk
0 Points
1 Post
Is MPS the right solution?
Oct 14, 2008 02:02 PM|LINK
We currently host applications that we develop in house for our customers. We Active Directory for the user accounts and we allow an admin at each customer to create new AD accounts for their users. We do this by using Citrix to publish Active Directory Users & Computers.
While I would like a more elegant solution, my chief concern right now is that I want the customer admin to be able to unlock accounts, but not set the PasswordNeverExpires flag.
It seems like I could accomplish this with MPS if I understand it properly, but implementing MPS would be a LOT of work for just this one feature.
Is MPS the right solution? Are there simpler alternatives that would allow us to delegate AD account management?
Thank you,
Chris
MPS MPS AD