denied access to unlock user account

From: Henrico (anonymous_at_discussions.microsoft.com)
Date: 02/05/04 

Date: Thu, 5 Feb 2004 10:17:06 -0800

I have a user who was delegated the permission to unlock
user accounts. While this generally works, he has come
across (at least) one user where the option to unlock an
account is not available.

Both users are in the same group used for the
delegation. Is this why one can't unlock the other?

Thanks

Relevant Pages

  • Re: Delegate Account release
    ... The lockout property is an attribute called lockoutTime. ... The permission to write that value needs to be given. ... Once that delegation is done, you can use the GUI tools or the command line tool UNLOCK to unlock the user accounts. ...
    (microsoft.public.windows.server.security)
  • Re: Delegation Rights
    ... I have found the article on the unlock user account ... delegation tasks that are custom. ... use a universal group ...
    (microsoft.public.win2000.security)
  • denied access to unlock user account
    ... I have a user who was delegated the permission to unlock ... user accounts. ... delegation. ...
    (microsoft.public.win2000.active_directory)
  • denied access to unlock user account
    ... check your group policy settings ... >I have a user who was delegated the permission to unlock ... >user accounts. ... >delegation. ...
    (microsoft.public.win2000.active_directory)
  • Re: denied access to unlock user account
    ... The delegation is done correctly. ... permission can unlock any other account except this one. ... Further testing has determined that group membership is ...
    (microsoft.public.win2000.active_directory)