Tony, Delegate control for that OU to the user you want to be able to unlock/re-enable accounts/change passwords.
This is done (from memory - sorry if it's wrong) by right clicking on the OU, and choosing "Delegate control". I know once it is in place you remove the delegated permissions by looking at the advanced page on security settings for the OU. I hope this helps. themolk. > -----Original Message----- > From: Woods, Tony MHR:EX [mailto:[EMAIL PROTECTED]] > Sent: Thursday, 13 June 2002 8:00 am > To: NT 2000 Discussions > Subject: Unlock Accounts > > > Hi, > > Is there a specific right for just unlocking accounts on User > objects within > a specified OU? I have a group on a HelpDesk and besides > fielding calls, > they also have the right to unlock accounts. They used to do > this on an NT 4 > domain using Enterprise Administrator. Now that they're > moving to 2K, I need > to provide that same right but using the AD Users and > Compters snap-in. Any > ideas? I don't see it as an option under the Advanced rights for User > objects but maybe someone knows the minimum rights needed? > > Cheers, > Tony > > Tony Woods MCSE, CNA > Ministry of Human Resources > 808 Douglas Street > Victoria, BC, Canada, Earth > http://www.mhr.gov.bc.ca <http://www.mhr.gov.bc.ca> > ---------------------------------------- > Yesterday it worked. > Today it is not working. > Windows is like that. > > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
