Delegation Account Unlock to Users

Hi,


I have delegated the Account Unlock function to my helpdesk but I'm
encountering some problems now.

1. I noticed that my helpdesk is unable to unlock fellow helpdesk
colleagues' ids if they are locked

2. I also noted that my helpdesk is unable to unlock accounts that are added
to default domain groups such as Administrators, Account Operators, System
Operators and Backup Operators.

I'd like to enquire if anyone has managed to succesfully delegate the
Account Unlock function to work on the above 2 scenarios, other than on User
Objects only.

Thank you.
Maple


.

Relevant Pages

  • Re: Cant anyone help me with this?
    ... What I have done is to delegate the change password and reset password ... permission to our helpdesk. ... password or the option to unlock an account is simply grayed out. ...
    (microsoft.public.windows.server.migration)
  • Re: Cant anyone help me with this?
    ... check on the ACL of that user object. ... Make sure that your helpdesk really ... > What I have done is to delegate the change password and reset password ... > password or the option to unlock an account is simply grayed out. ...
    (microsoft.public.windows.server.migration)
  • Delegating renaming a computer account
    ... objects for our helpdesk to a particular OU in our Win2K3 ... I've read that you need to delegate ... rename rights to the computer objects. ...
    (microsoft.public.win2000.active_directory)
  • How to delegate "Create Mailbox" rights?
    ... Small office here and would like to delegate the right to my helpdesk ... to create user accounts with mailboxes. ...
    (microsoft.public.exchange.admin)