Re: Account control

Ok as I see that this is probably something granted in the delegation of
control is there something I can use to show me the current delegation? I
don't want to go to far into the wizard as it looks more for assigning than
just viewing.


"Jamie" <jlawsonOMIT@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:eEw1UK9xIHA.4500@xxxxxxxxxxxxxxxxxxxxxxx
Ok as this domain was built before I came on I was granted control through
someone. They set my personal admin account up as a member of the 'domain
admin' group.



It appears that I have access to everything else with these accounts but
for some reason the unlock checkbox is grayed out.


Our enterprise admin group only has the administrator account in it.

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb669f7ed8ca95f897abe6a6@xxxxxxxxxxxxxxxxxxxxxxx
Hello Jamie,

Which account do you mean normal users or maybe enterprise admin
accounts? Do you work with the builtin administrator or your own user
account? Is it a real domain admin, or did someone give you rights with
delegate control?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Ok I'm a new and only domain admin but I have some accounts that I can
not unlock when they get locked out.

Can anyone tell me why this is?







.

Relevant Pages

  • Re: Security Configuration Advice
    ... A second approach is to audit account management actions. ... The bottom line however is that an admin will be able to get ... >> If the application allows for configuring access control (as to what ...
    (microsoft.public.windows.server.security)
  • Re: join domain/create computer accounts... driving me NUTS!
    ... i added the following text to template6 and it doesnt even show up ... when i go to delegate control at the domain level!!!! ... "Account Restrictions" ... have you ever read the delegation of control white ...
    (microsoft.public.windows.server.active_directory)
  • Re: Access Denied - Trusting Computer for Delegation To Services
    ... This is the problem, the account I'm using IS domain admin, as well as ... Enterprise Admin AND Schema Admin!So I can't understand why it won't let me ... user accounts to be trusted for delegation' user right on the default domain ... Co-author of "The .NET Developer's Guide to Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Access Denied - Trusting Computer for Delegation To Services - SORTED
    ... I tried with the default domain admin, which is usually disabled (we don't ... use the default domain admin account, instead we made a copy of it, called ... computer and user accounts to be trusted for delegation' user right on the ... Co-author of "The .NET Developer's Guide to Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegate Control?
    ... For delegation of control check: ... Do "normal" users have access to query AD OU's? ... Why would an account that has no other rights be ...
    (microsoft.public.windows.server.active_directory)