Re: Delegate permission to unlock AD accounts

Hello colin,

If you talk about this one:
http://support.microsoft.com/kb/294952/en-us

then you can also delegate the control to the OU where your Helpdesk people are located.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hi All,

I have read the docs reagarding delegating a group/users rights to
unlock AD user accounts - that is fine.

I want to give our helpdesk guys the right to do that but also be able
to unlock thier own accounts.

Can someone point me to resource regarding this?

Thanks.



.

Relevant Pages

  • How to delegate "Create Mailbox" rights?
    ... Small office here and would like to delegate the right to my helpdesk ... to create user accounts with mailboxes. ...
    (microsoft.public.exchange.admin)
  • Re: Delegate permission to unlock AD accounts
    ... delegate the permisson to that group by configuring an ACE for that group on the OU containing the user accounts ... Always test ANY suggestion in a test environment before implementing! ... unlock AD user accounts - that is fine. ... to unlock thier own accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegation to create user accounts only and not disable or delete
    ... Choose the "create custom task to delegate" click next ... select the "This folder, existing objects in this folder, and creation of ... Administration has found out that this teacher has been disabling user ... delete or manage user accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cant anyone help me with this?
    ... What I have done is to delegate the change password and reset password ... permission to our helpdesk. ... password or the option to unlock an account is simply grayed out. ...
    (microsoft.public.windows.server.migration)
  • Re: Cant anyone help me with this?
    ... check on the ACL of that user object. ... Make sure that your helpdesk really ... > What I have done is to delegate the change password and reset password ... > password or the option to unlock an account is simply grayed out. ...
    (microsoft.public.windows.server.migration)