Re: How 2 confirm delegation?

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 08/28/04


Date: Fri, 27 Aug 2004 21:37:27 -0400

Could be any number of things.

1. How are you trying to unlock and/or reset accounts?
2. Have you verified via dsacls or ADSIEDIT that the actual ACEs have been
applied to the objects in question?
3. Are you trying to apply security updates to users who have native rights in
AD like acc ops, admins, serv ops, etc? If so, read up on AdminSDHolder, search
google and you will get a ton of hits.

   joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
John wrote:
> I have created a security group to unlock locked out 
> accounts, reset passwords and do backups. and I have 
> delegated control of a group to this new security group 
> and used the ADSIEdit tool (MKGA 279723) but it does not 
> seem to work. logged on as a member of this security group 
> I cannot reset passwords or unlock accounts. 
> what have I missed? 


Relevant Pages

  • lockoutstatus.exe
    ... reset passwords on multiple DCs more quickly and unlock ... accounts. ... But the problem is that I can never reset the ...
    (microsoft.public.win2000.active_directory)
  • Re: Remote password change/account unlock
    ... Allowing users to change or reset their passwords or unlock their accounts ... There are security implications to having a service running as ...
    (microsoft.public.win2000.security)
  • Re: Delegation - Password Reset - Access Denied
    ... If you go to properties of an AD object, select the security tab and click ... on advanced you should be on the permissions tab. ... WARNING - Any implicit permissions defined will be lost and reset back to ... Accounts in the OU and found that the BldgAdmins group was not listed. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Hacked
    ... *consider, having every user reset his/her passwords, and reset all service accounts. ... I've done a full scan and the server is clean. ...
    (microsoft.public.security)
  • Re: Hacked
    ... *consider, having every user reset his/her passwords, and reset all service accounts. ... I've done a full scan and the server is clean. ...
    (microsoft.public.security)