Delegate Control in Active Directory to allow group to unlock user accounts

[Nino_1]

Hello All,


We've been tasked with granting access to a group of users to unlock
user accounts, we've granted rights to this group through the delegate
control wizard in attempt to allow this but the account lockout
chekbox is still greyed out. Does anyone have any suggestions on how
to acomplish this.

Thanks,


Nino

[Meinolf Weber]

Hello Nino_1,

How long did you wait after configuring it, maybe it is not replciated through
all dc's? Where did you configure it, domain level or OU and are the user
accounts in the OU?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

> Hello All,
>
> We've been tasked with granting access to a group of users to unlock
> user accounts, we've granted rights to this group through the delegate
> control wizard in attempt to allow this but the account lockout
> chekbox is still greyed out. Does anyone have any suggestions on how
> to acomplish this.
>
> Thanks,
>
> Nino
>

[Norbert Fehlauer [MVP]]

Nino_1 wrote:
Hi,

> We've been tasked with granting access to a group of users to unlock
> user accounts, we've granted rights to this group through the delegate
> control wizard in attempt to allow this but the account lockout
> chekbox is still greyed out. Does anyone have any suggestions on how
> to acomplish this.

http://support.microsoft.com/kb/294952/en-us Applies to Windows 2003 too.
But in W2k3 it can be done within the GUI.

HTH
Norbert
--
Dilbert's words of wisdom #04: There are very few personal problems
that cannot be solved by a suitable application of high explosives.

[Nino_1]

On Nov 1, 10:15 am, "Norbert Fehlauer [MVP]" <n.fehla...@gmx.net>
wrote:
> Nino_1 wrote:
>
> Hi,
>
> > We've been tasked with granting access to a group of users to unlock
> > user accounts, we've granted rights to this group through the delegate
> > control wizard in attempt to allow this but the account lockout
> > chekbox is still greyed out. Does anyone have any suggestions on how
> > to acomplish this.
>
> http://support.microsoft.com/kb/294952/en-usApplies to Windows 2003 too.
> But in W2k3 it can be done within the GUI.
>
> HTH
> Norbert
> --
> Dilbert's words of wisdom #04: There are very few personal problems
> that cannot be solved by a suitable application of high explosives.

That worked -- thanks much.

Nino

[Norbert Fehlauer [MVP]]

Nino_1 wrote:
Hi,

> That worked -- thanks much.

No problem. Have fun.

Bye
Norbert
--
Dilbert's words of wisdom #97: Someday we'll look back on all this and
plow into a parked car.