[ActiveDir] Unlock Workstation User Right

[Tim Foster]

I want to grant some users the right to unlock workstations in a W2K3 domain.  I have scanned through Group Policy and I can’t seem to find the appropriate setting to do this.  Is this a right that is automatically granted to one of the Built-In groups?  If so, which one?  It seems overkill to have to add users to the Administrators group to get this right.   Thanks in advance for any help the list can give.   Tim