See FAQ # 20 at http://www.activedir.org/FAQ.htm
Tony ---------- Original Message ---------------------------------- From: "Thornley, Dave H" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 19 Feb 2003 11:42:32 -0000 Hi Yusuf, You need to make the property visible first. Open the file c:\winnt\system32\dssec.dat, search for [User], then scroll down til you find the line lockoutTime=7, and change this to lockoutTime=0. This makes lockoutTime visible in ACLs. You should then be able to grant read\write access to the lockoutTime attribute to the groups you want to be able to unlock accounts. This gives them the access they need. There's a knowledge base article on it, but I don't remember the number - sorry. HTH dave -----Original Message----- From: Mayet, Yusuf Y [mailto:[EMAIL PROTECTED]] Sent: 19 February 2003 11:33 To: [EMAIL PROTECTED] Subject: [ActiveDir] Account Unlocking Property I am trying to delegate the permission of "Account Unlock" to a related group. I can under the ACL find "Reset Password" and all the other finer stuff. But can't seem to find the one mentioned above. I have used ADSI Edit to locate "lockoutDuration" but also not sure what I should enter for the attribute value. Also where do I make this change on the Domain Class? Can anyone please help? Thanks in advance. Yusuf ______________________________________________ Disclaimer and confidentiality note Everything in this e-mail and any attachments relating to the official business of Standard Bank Group Limited is proprietary to the company. It is confidential, legally privileged and protected by law. Standard Bank does not own and endorse any other content. Views and opinions are those of the sender unless clearly stated as being that of Standard Bank. The person addressed in the e-mail is the sole authorised recipient. Please notify the sender immediately if it has unintentionally reached you and do not read, disclose or use the content in any way. Standard Bank can not assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference. _______________________________________________ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
