I have a windows 2003 domain and am trying to delegate permission to a helpdesk group that will allow them to unlock users accounts. I created a new group in the users folder called helpdesk and created a new user called testu and made this user a member of the helpdesk group. I ran the delegate control wizard from the top of the tree and created a custom task for only user objects and gave the group permission of reat lockouttime and write lockout time. When I logged in as testu, the option to unlock the account is still greyed out.
No announcement yet.
Delegate the unlock account right