Re: Delegation Account Unlock to Users

Account Operator and other accounts that have enhanced native rights are protected by the adminsdholder functionality, google on adminsdholder and you will get a ton of hits explaining it.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


Maple wrote: 
Hi,


I have delegated the Account Unlock function to my helpdesk but I'm encountering some problems now.

1. I noticed that my helpdesk is unable to unlock fellow helpdesk colleagues' ids if they are locked

2. I also noted that my helpdesk is unable to unlock accounts that are added to default domain groups such as Administrators, Account Operators, System Operators and Backup Operators.

I'd like to enquire if anyone has managed to succesfully delegate the Account Unlock function to work on the above 2 scenarios, other than on User Objects only.

Thank you.
Maple


.

Relevant Pages

  • RE: Local Group memberships
    ... be ADMT migration objects. ... If you want to add a user who is member of account operators in Windows NT ... Manually add the user to the "account operator" group. ... Export the membership from NT domain to a .txt file. ...
    (microsoft.public.windows.server.migration)
  • Adding Computers to the domain
    ... by adding accounts in the account operator built in group. ... I have delegated advanced rights on specific OU's ...
    (microsoft.public.windows.server.general)
  • Access denied in Users and Computers
    ... i'm having a strange problem in my Windows Server 2003 AD: ... a W2K3 member server with the Admin Tools installed ... uses "FIND" to locate a user account ...
    (microsoft.public.windows.server.active_directory)
  • Re: A question about how to validate a users request to change a pas sword or unlock there account
    ... A question about how to validate a user's request to change a pas sword or unlock there account ... Currently a user calls the helpdesk, ...
    (Security-Basics)
  • Re: Outlook/Exchange equivalent to Groupwise proxy?
    ... A proxy account in Groupwise is a real mailbox. ... User1 wants to grant proxy access to User2. ... This same scenario would also apply to my previous "helpdesk" scenario. ...
    (microsoft.public.exchange.clients)