Lenovo Software Help Center

Allow Help Desk to change user password

Issue

Customer would like to limit Help Desk users to only be able to change/reset user password via the webAdmin Dashboard.


Solution

This can be done by assigning specific users in the system the User Group Admin role, as well as assigning them the webAdmin Dashboard and User Group Admin links.  The best method to accomplish this task, while providing for ease of management, is to use a group to assign these rights to the users.

The following example assigns the ability to modify user objects to the users of a Help Desk.
  1. Create a group named HelpDeskToManageUsers.
  2. Assign the group the User Group Admin role* via the group's Roles tab.
  3. Assign the group the webAdmin Dashboard link (under the Admin Programs menu), via the group's Assignments tab.
  4. Assign the group the User Group Admin link (under the Admin Programs menu), via the group's Assignments tab.
    In addition, you can also assign the webAdmin Tree View link*(under the Admin Programs menu), via the group's Assignments tab.
  5. Assign the Help Desk users to the new group, via the group's Members tab.

The Help Desk users will now see a limited version of the webAdmin Dashboard.  With only the User-Group Admin (and Tree Root if assigned) option.  The Help Desk users will be able to modify user and group objects, including changing passwords via a user object's Authentication tab.



*Note: Due to a bug recently identified, systems running 6.5.1.x or lower will find that the User Group Admin role is not providing enough rights to change user password.

A temporary workaround is to assign the Stoneware Administrator role to the group.

However, if you use the Stoneware Administrator role the Help Desk users would then have full admin rights to UW.  For this reason you will probably not want to assign them the webAdmin Tree View link, as that would give them full admin access to all directory objects.  Another downside is that the Help Desk users could just assign themselves any of the webAdmin Dashboard links, thus granting them admin access to any features they want.  Therefore this workaround should only be used at your discretion.

This bug has been resolved as of 6.5.2.x, with a planned release for the end of March 2018.

    • Related Articles

    • User not able to change password in Unified Workspace

      How to enable Change Password debug, when having trouble with users not being able to change, or reset, their password in Unified Workspace. The Change Password debug needs to be enabled on the server that connects to your directory.  You may know ...
    • Allow Help Desk to reset Image Challenge images

      Issue Customer would like to allow Help Desk users to only be able to reset user Image Challenge images when they have been forgotten by a user. Solution This can be done by assigning specific users in the system the User Group Admin role, as well as ...
    • Change Password Reset URL

      Issue Customer would like to use their own password changing application instead of the one built into Unified Workspace. Solution To point the Reset Password link to a specific URL: Open webAdmin Dashboard. Expand Customization Center. Expand ...
    • User password expiration / lockouts in Microsoft Active Directory

      How can I show accounts that are locked out in AD ? http://technet.microsoft.com/en-us/library/cc738772(WS.10).aspx Can I dump password expiration for users in AD ? AdFind.exe to dump the password expiration. Stoneware download / Utilities has this ...
    • User unable to change password with MS Active Directory

      Microsoft requires that you configure the portal to talk to the MS LDAP server using SSL. If you are not configured for SSL for LDAP then webnetwork will work, but anything that deals with password changing will not function.
    • Popular Articles

    • Can a Teacher see Students outside of school?

      This content has moved! Visit the new LanSchool Classic Help Desk It looks like you may be interested in LanSchool Classic General FAQ.
    • LanSchool Latest Release Notes

      This content has moved! Visit the new LanSchool Classic Help Desk It looks like you may be interested in LanSchool Classic Latest Release Notes.
    • How to uninstall LanSchool Student and WebHelper from Chromebook

      This content has moved! Visit the new LanSchool Classic Help Desk It looks like you may be interested in Mass Deploying LanSchool Student for Chromebook.
    • LanSchool 8.0.2.82 Release Notes

      LanSchool™ Release Notes Updated: December 16, 2019 Component Versions LanSchool 8.0.2.82, December 16, 2019 Chromebook App 8.0.2.13, December 16, 2019 Chrome Web Helper: 8.0.2.5, December 16, 2019iOS TA and Student 8.2.0, December 16, 2019 Android ...
    • Controlling multiple students at once

      Problem: Can I remote control multiple computers at once? Cause: N/A Prerequisite(s): LanSchool Teacher and Student Solution(s): If all of the computers in the lab are the same basic image or configuration (for example. all Windows XP machines with ...
    • Recent Articles

    • Lenovo Software Newsletter

      Question Is there a way I can be notified about product updates? Solution To receive updates from Lenovo Software about product updates, we encourage customers to subscribe to our Lenovo Software Newsletter.
    • Allow Help Desk to reset Image Challenge images

      Issue Customer would like to allow Help Desk users to only be able to reset user Image Challenge images when they have been forgotten by a user. Solution This can be done by assigning specific users in the system the User Group Admin role, as well as ...
    • Troubleshoot RDS

      This is a good article, from Microsoft, on how to troubleshoot RDS/RDP logon issues. https://social.technet.microsoft.com/wiki/contents/articles/37841.remote-desktop-services-rds-logon-connectivity-overview-and-troubleshooting.aspx
    • Building an Employee Phonebook system

      Building a Mini Application Post #20 Can it really be that simple to create a little application with Report and Form Builder?  This tutorial shows you that it is - and actually helps you make a useful application at the same time as learning how to ...
    • Working with Binary Data in Report Services

      Quick Start Guide - Binary Data This tutorial is designed as a quick "How Do I Work With Binary Data" tutorial.  It walks through the steps necessary to upload an image to a database.  Every webNetwork 6.0 installation ships with a database called ...