Delegation Account Unlock to Users

M

Maple

Hi,


I have delegated the Account Unlock function to my helpdesk but I'm
encountering some problems now.

1. I noticed that my helpdesk is unable to unlock fellow helpdesk
colleagues' ids if they are locked

2. I also noted that my helpdesk is unable to unlock accounts that are added
to default domain groups such as Administrators, Account Operators, System
Operators and Backup Operators.

I'd like to enquire if anyone has managed to succesfully delegate the
Account Unlock function to work on the above 2 scenarios, other than on User
Objects only.

Thank you.
Maple
 
J

Joe Richards [MVP]

Account Operator and other accounts that have enhanced native rights are
protected by the adminsdholder functionality, google on adminsdholder and you
will get a ton of hits explaining it.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Account Ops Cant Unlock Other Acct Ops 1
What permission is required to unlock user account 2
Righs to unlock accounts:Set "read/write accountlockout" time, but option is still gray out 1
denied access to unlock user account 5
Delegate rights to unlock accounts 6
AD account admin delegation and moving all user accounts to an OU 3
Script to perform massive unlock 2
Cannot Unlock in Order to Switch Users 1

Top