Active Directory Permissions

JonD

I have set up an instance of SSPR and have synchronised with an AD source.

The user I am using to create the Sync has been granted the appropriate permission (as per documentation) but cannot reset passwords due to a insufficient right error.

It does work however if granted Domain Admins. Please could you clarify what further right may be required outside of those stated in the set up docs.

AD source is Server 2019

Thanks

Jon

ChrisDakin

Hi,

I've just run through this again myself now and it's working as expected.
What I suspect might be happening is that you might have been trying to reset the password for a Domain Admin, is this assumption correct?

If so, Domain Admins are protected accounts and can't be changed with permissions on the delegation of control wizard.
There is something you can do though which is detailed on this link: https://social.technet.microsoft.com/Forums/en-US/0091dfd2-458c-4e1e-81e3-8fe9d070d701/delegate-password-reset-for-domain-admins?forum=winserverDS

Chris.