denied access to unlock user account

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Laurie (anonymous_at_discussions.microsoft.com)
Date: 02/05/04 

Date: Thu, 5 Feb 2004 10:25:17 -0800

check your group policy settings
>-----Original Message-----
>I have a user who was delegated the permission to unlock
>user accounts. While this generally works, he has come
>across (at least) one user where the option to unlock an
>account is not available.
>
>Both users are in the same group used for the
>delegation. Is this why one can't unlock the other?
>
>Thanks
>.
>

Relevant Pages

  • denied access to unlock user account
    ... I have a user who was delegated the permission to unlock ... user accounts. ... delegation. ...
    (microsoft.public.win2000.security)
  • denied access to unlock user account
    ... I have a user who was delegated the permission to unlock ... user accounts. ... delegation. ...
    (microsoft.public.win2000.active_directory)
  • Re: Delegation Rights
    ... I have found the article on the unlock user account ... delegation tasks that are custom. ... use a universal group ...
    (microsoft.public.win2000.security)
  • Re: Delegate Account release
    ... The lockout property is an attribute called lockoutTime. ... The permission to write that value needs to be given. ... Once that delegation is done, you can use the GUI tools or the command line tool UNLOCK to unlock the user accounts. ...
    (microsoft.public.windows.server.security)
  • Re: denied access to unlock user account
    ... The delegation is done correctly. ... permission can unlock any other account except this one. ... Further testing has determined that group membership is ...
    (microsoft.public.win2000.active_directory)