Hey I think that's what I was looking for. Thanks for your help. Chris -----Original Message----- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 18, 2003 3:54 PM To: NT 2000 Discussions Subject: RE: Delegation of Control for Disable Account
The account locked out property is stored as a bit flag with some of the other extended attributes, including "User Cannot Change Password", "Password Never Expires" and a few others. Since it's a bit flag value, you'd have to give permissions to modify all the values stored in that field. I believe you can dig through the delegation wizard, creating a custom delegation, specific to just User objects, and give the "Read and write Account Restrictions" writes to accomplish what you want, but I've not tested that. -------------------------------------------------------------- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. > -----Original Message----- > From: Leuci, Chris [mailto:[EMAIL PROTECTED] > Sent: Tuesday, March 18, 2003 3:35 PM > To: NT 2000 Discussions > Subject: RE: Delegation of Control for Disable Account > > > guess nobody has done this before > > -----Original Message----- > From: Leuci, Chris [mailto:[EMAIL PROTECTED] > Sent: Friday, March 14, 2003 12:36 PM > To: NT 2000 Discussions > Subject: Delegation of Control for Disable Account > > > I've set up delegatation of control for the ablility to > reset passwords, and unlock accounts. I'd also like to > include the ability to disable accounts. Does anyone know > what this feature is named in the delegation of control wizard??? > Chris > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
