Announcement

Collapse
No announcement yet.

Delegate the unlock account right

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Delegate the unlock account right

    I have a windows 2003 domain and am trying to delegate permission to a helpdesk group that will allow them to unlock users accounts. I created a new group in the users folder called helpdesk and created a new user called testu and made this user a member of the helpdesk group. I ran the delegate control wizard from the top of the tree and created a custom task for only user objects and gave the group permission of reat lockouttime and write lockout time. When I logged in as testu, the option to unlock the account is still greyed out.

  • #2
    Re: Delegate the unlock account right

    I figured it out. It works fine on regular users just not domain admins.

    Comment


    • #3
      Re: Delegate the unlock account right

      Why didnt you select the standard "manage user passwords" task?
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd
      Scotland

      ** Remember to give credit where credit is due and leave reputation points where appropriate **

      Comment


      • #4
        Re: Delegate the unlock account right

        I don't want these users to be able to do anything except unlock accounts. Will manage users do this? I saw the create and delete and decided to give specific rights.

        Comment


        • #5
          Re: Delegate the unlock account right

          There is a task to "reset passwords and unlock accounts" -- normally the two go together
          Tom Jones
          MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
          PhD, MSc, FIAP, MIITT
          IT Trainer / Consultant
          Ossian Ltd
          Scotland

          ** Remember to give credit where credit is due and leave reputation points where appropriate **

          Comment


          • #6
            Re: Delegate the unlock account right

            I tested the user and all he is able to do is unlock an account so I think I will leave it like that. Thanks for your help

            Comment

            Working...
            X