Re: Permissions to unlock Administrator account?

you cannot lockout the administrator account...it will unlock automatically as soon as you enter the correct pwd

see:
http://blogs.dirteam.com/blogs/jorge/archive/2006/10/05/The-Default-domain-administrator-account-is-locked_21003F00_.aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Chris Lukowski" <ChrisLukowski@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:751D5522-5E34-4CFD-9CEF-BB658397162A@xxxxxxxxxxxxxxxx
My fellow network administrator and I recently enacted the best practice of
having our individual user accounts removed from the Administrators and
Domain Admins group, leaving only the Administrator account there (I believe
that's what best practices dictate). We also delegated authority to create
and unlock user accounts to our accounts so we could still use AD Users and
Computers for daily admin tasks. However, we ran into a problem where the
Administrator account was locked out and the lockout checkbox was greyed out
from our consoles. We were lucky enough to have a DC hooked up to a KVM that
still had the admin logged in so we could unlock it from there.

My question is, what permission do we have to grant our accounts to be able
to unlock the Administrator account? What would we have done if we didn't
have any admin sessions logged in already?

.

Relevant Pages

  • Re: Setting up XP on a domain network - best practices question
    ... or created a new ID with admin privileges to install all the ... Then use XP with full admin rights on the box. ... as the local administrator. ... Do all updates, configuration, and program installations from one of these two local accounts. ...
    (microsoft.public.windowsxp.general)
  • Re: a new desktop pc or a mac g5 ? (Mac Fanatics)
    ... While the accounts I utilize are primarily windows admin accounts, my 2 children do not log in as administrators. ... The problem is that many people _always_ log on as the administrator rather than creating user accounts because it's less hassle, ... After a computer has been shipped from the factory, each computer is personalized and therefore, now has personalized problems. ...
    (rec.photo.digital)
  • Re: Netowrk Admin. Breach
    ... the use of administrator accounts should be restricted as ... Anyone needing to logon as a domain admin or a server ... but nothing on the domain then how could he cause damage domain wide? ...
    (microsoft.public.windows.server.security)
  • Re: Invisible Admin account
    ... if they are admin they can undo anything you ... or specific accounts log in with smart ... Short of hacking your machines up with your own rootkit-like ... Adminstrator account that another user with administrator access could not ...
    (microsoft.public.win2000.security)
  • Re: Account keeps going locked out in Windows 2000 Pro SP4
    ... > accounts for each member of the family. ... > (including the administrator) keep going locked out. ... > accepted after I unlock. ... verify the security posture, and make sure the firewall (you do have a firewall, ...
    (microsoft.public.win2000.security)