User Account Unlock attribute

  • Thread starter Thread starter Chris Henderson
  • Start date Start date
C

Chris Henderson

Could somebody please tell me what attribute to use in order to allow
somebody to unlock locked user accounts please? The reset password
attribute's obvious but not the account unlock/lock attribute.

Thanks in advance,

Chris Henderson
CNE, MCSE
 
The property for the security is "User Objects> Read lockout time, and Write
lockout time." I think you have to make an ADSI edit to get those objects
to show up. You should just try "Delegate Control" on the domain or an OU
in your domain (your preferences) you can specify those attributes in there
very easily. Open ADUC snapin and then either right click on domain object
or an OU then click Delegate Control.

Philip Nunn
 
Hi Chris,

To delegate the right to a group or user:

1. Create the group or user account that you want to have the right to
unlock user accounts in Active Directory Users and Computers (for
example, Help Desk Admins).

2. Right-click the domain in Active Directory Users and Computers, and then
click Delegate Control from the menu that is displayed.

3. The Delegation of Control Wizard should be displayed. On the Welcome
dialog box, click Next.

4. On the Users and Groups dialog box, click Add. Select the group in the
list that you want to give the right to unlock accounts, and then click OK.
On the Users and Groups dialog box, click Next.

5. On the Tasks to Delegate dialog box, click "Create a custom task to
delegate", and then click Next.

6. On the "Active Directory Object Type" dialog box, click "Only the
following objects in the folder:". In the list, click "User objects" (the
last entry in the list), and then click Next.

7. On the Permissions dialog box, click to clear the General check box, and
then click to select the Property-specific check box. In the Permissions
list, click to select the "Read lockoutTime" check box, click to select the
"Write lockoutTime" check box, and then click Next.

8. On the "Completing the Delegation of Control Wizard" dialog box, click
Finish.

Thanks for using Microsoft News Group!

Sincerely,

Steven Liu

Microsoft Online Partner Support

MCSE 2000

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.
 
Back
Top