Posted on 01-04-2018 04:43 AM
Many of our IT users have multiple AD accounts. One is their every day standard account and the others are special accounts they use that have elevated rights. No one uses their elevated accounts to login directly on the Macs so there are no local Mobile Accounts for these accounts on the Macs. Is there a tool that will let them change their other account passwords without having a local instance of it?
Posted on 01-04-2018 09:18 AM
In all the places I've been with AD, there's an online tool that does this and I've used it to do exactly what you posted.
Have you checked with the AD folks on it?
Posted on 01-04-2018 09:33 AM
There's something they are testing but it's scope is dubious right now.
Posted on 01-05-2018 01:41 PM
We've been using Anixis here for many years and it can do what you are describing:
https://anixis.com