Unlocking AD Accounts

Tech-Archive recommends: Fix windows errors by optimizing your registry

I'm having an issue with unlocking user accounts in AD.

I've delegated the right to unlock accounts to the Helpdesk global group.

If a member of the Helpdesk group tries to unlock the account going through the MMC, it is successful.

If a member of the Helpdesk group tries to unlock the account by using the command:

net user userid /active:yes /domain

it is unsuccessful. The following error message is returned:

System error 5 has occurred.
Access is denied.

I'd like the group to use the NET command. I don't see any errors in the event log.

Has anyone come across this before?

-=Dr.Furrfu=-
.

Relevant Pages