Give other users the ability to Unlock user accts

  • Thread starter Thread starter Planz
  • Start date Start date
P

Planz

Greetings all,
I want to allow specific users of my choosing to be able to unlock user
accounts and reset passwords for all users EXCEPT for anyone in the DOmain
admins group

What are the steps.
I take it I build a group first then what??
How d oI go abou tthis policy and the ACL's??
ANy kb's anyone knwo of thanks
 
The only way to unlock an account is with local or domain admin privledges.
There isn't a right that you can assign.

As far as password resets, use the Delegation wizard by right clicking an
OU, and granting the right when prompted. Make sure there are no admin
accounts in the OU you delegate.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com
 
Sorry. I misread your post.

To grant unlock rights Load up the Delegation Wizard for the OU, and then
choose to delegate a custom task. Select the User object from the list, and
then on the next dialog, tick off General & Property-Specific. From there,
tick off Read, and Read/Write lockoutTime.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com
 
Back
Top