Active Directory Delegation of Administration Problems

We have an OU for IT people and an OU for the rest of the end user
population. I have delegated the rights to Read Lockout Time and Write
Lockout time to the support center people and this works fine in the general
user OU but not in the other IT OUs.
The odd thing is that I can create a new user account in the IT OU, lock it
out, and one of the support center people can unlock that account but not the
other users that have been in there.
I tried moving the user accounts out of the IT OU and into another one and
back and that didn't help either.

Any ideas?
.

Relevant Pages

  • Re: Auto-update of an application, permission problem in "Program Files"
    ... is a filted normal user account token by default. ... normal user write permission to the "Program Files" directory. ... Microsoft Online Community Support ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Office 2007 Setup Successful - but Office wont run
    ... I recommend Ian to recreate the user account. ... If you would like to get the Technet newsgroup online support, ... Office 2007 Setup Successful - but Office won't run ...
    (microsoft.public.office.setup)
  • RE: SQL 2000 Agent jobs in a non-domain environment
    ... Since you have an non-domain machine, ... local user account to access remote machines in your network? ... 818742.KB.EN-US Overview of the Microsoft Configuration Capture Utility ... Microsoft Online Community Support ...
    (microsoft.public.sqlserver.setup)
  • RE: How to remove home folder when I remove user from the account?
    ... The home folder for this user account could not be removed. ... that you contact Microsoft Product Support Services via telephone so that ... Please check http://support.microsoft.com for regional support phone ...
    (microsoft.public.windows.server.sbs)
  • Re: Compare Password Lockout time to Current time
    ... I'd like to compare the password lockout time of an Active Directory user ... and found a link to a book on Google Books (fourth or fifth link ... It said that the lockouttime attribute of a user account ...
    (microsoft.public.scripting.vbscript)