Re: Certain Accounts can only be unlocked by Domain Admins
- From: "Steven L Chan" <StevenLChan@xxxxxxxxx>
- Date: Mon, 11 May 2009 11:07:34 -0400
Question:
If I run the vbscrip provided by Microsoft that should resolve the issue, right?
Steven
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message news:ff16fb662326d8cb9dce7d1c3ac0@xxxxxxxxxxxxxxxxxxxxxxx
Hello Steven,
Expected behaviour, because lower level users are not allowed to unlock higher level ones or change them.
See here about AdminSDholder:
http://policelli.com/blog/?p=136
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
To All:
Windows accounts with Domain Admins rights can only be unlocked by
Domain Admins.
Our Help Desk personnels can unlock any accounts but the ones with
Domain Admins rights.
Under security settings, the Help Desk has Full Control to User
objects, don't have the ability to unlock Domain Admin accounts.
I've read an article from MS about this issue, but unable to locate
it.
Any help would be greatly appreciated it.
Steven
.
- Follow-Ups:
- Re: Certain Accounts can only be unlocked by Domain Admins
- From: Meinolf Weber [MVP-DS]
- Re: Certain Accounts can only be unlocked by Domain Admins
- References:
- Certain Accounts can only be unlocked by Domain Admins
- From: Steven L Chan
- Re: Certain Accounts can only be unlocked by Domain Admins
- From: Meinolf Weber [MVP-DS]
- Certain Accounts can only be unlocked by Domain Admins
- Prev by Date: AD trust RPC
- Next by Date: Re: AD trust RPC
- Previous by thread: Re: Certain Accounts can only be unlocked by Domain Admins
- Next by thread: Re: Certain Accounts can only be unlocked by Domain Admins
- Index(es):
Relevant Pages
|
