ForceChangePassword

ForceChangePassword allows a user/group to change the password over another user. In real-world environments, there are usually _adm accounts that have higher privileges than the low accounts. For example, we can have m.johnson and m.johnson_adm . Since they're both accounts dedicated for a same person, it would make sense if the low account could change the password of the adm account.

ADSI Edit

In the "Advanced Security Settings for m.johnson_adm" window, we can add a principal (m.johnson) to be able to change/reset password.

Written by ruycr4ft