RE: [ActiveDir] Unlock Workstation User Right

Mon, 28 Feb 2005 07:16:23 -0800

I think I misunderstood the question.  I though he was talking about managing computer accounts. 

 

Todd

 

From: joe [mailto:[EMAIL PROTECTED]
Sent: Monday, February 28, 2005 9:42 AM
To: [email protected]
Subject: RE: [ActiveDir] Unlock Workstation User Right

 

If you mean unlock the console of a machine locked by a user, I think you have to be an administrator on that machine. It doesn't take any domain level permissions except being an authenticatable user unless the machine someone wants to unlock is a DC, at which point they have to be an admin of the DCs.

 

  joe

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CC/DNA)
Sent: Monday, February 28, 2005 9:31 AM
To: [email protected]
Subject: RE: [ActiveDir] Unlock Workstation User Right

Account Operators Local Group I think.  Must us ADU&C, you might have to grant permissions to the group if inheritance is blocked on some OU’s.

 

Todd Myrick

 

From: Tim Foster [mailto:[EMAIL PROTECTED]
Sent: Monday, February 28, 2005 9:08 AM
To: [email protected]
Subject: [ActiveDir] Unlock Workstation User Right

 

I want to grant some users the right to unlock workstations in a W2K3 domain.  I have scanned through Group Policy and I can’t seem to find the appropriate setting to do this.  Is this a right that is automatically granted to one of the Built-In groups?  If so, which one?  It seems overkill to have to add users to the Administrators group to get this right.

 

Thanks in advance for any help the list can give.

 

Tim 

Reply via email to