July 25, 2008 12:42pm pdt

1. KCTS 709,354
2. LauraEHu... 457,444
3. tigermatt 292,967
4. Chris-Dent 289,715
5. Jay_Jay70 211,314
6. oBdA 206,545
7. toniur 136,082
8. henjoh09 129,531
9. martin_b... 122,121
10. ChiefIT 116,432
11. ryansoto 111,834
12. Netman66 108,050
13. RobSamp... 98,570
14. leew 94,077
15. Sembee 93,144

1. KCTS 1,482,427
2. LauraEHu... 1,111,429
3. Jay_Jay70 576,137
4. Chris-Dent 512,313
5. oBdA 470,999
6. toniur 447,220
7. Sembee 388,223
8. tigermatt 387,898
9. Netman66 345,908
10. leew 241,628
11. Pber 186,660
12. TechSoEasy 185,930
13. kamalgopi 184,346
14. aissim 165,710
15. ChiefIT 161,482

01.20.2008 at 02:44PM PST, ID: 23097149

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

8.4

Script to unlock user accounts

Zones: Active Directory, Microsoft Server, VB Script

Tags: Microsoft, Server 2003, Active Directory 2003, scripting

We are looking to push some admin functions out to the edge to help lighten the load on the helpdesk/IS department. (Currently 3 people in the department supporting roughly 90 employees and 45 servers.)

What we would like to do is create a webpage that runs a script allowing managers to unlock windows accounts for their staff. The key components we need to capture (for security and auditing purposes) is to 1: log the unlock event to a SQL server (MSDE, Access, or SQL, it doesn't matter) the log needs to have the account unlocked, who unlocked it, and the terminal it came from. 2: We need it to send the IS department an email as soon as the attempt is made with the same information in the log. 3: Have it write an event to the security event log on the DC and 4: We need to restrict it so that only people in a given NTFS group, or OU can access the page and run the script.

My concerns with this are, how much of a security risk is it to open this up to non-IS staff? While it will help staff get unlocked quicker should the IS department be unavailable, I am not 100% convinced it is a sound decision.

Is anyone else doing this? AND, since I am admittedly not a strong programmer, I need some help getting pointed in the right direction on this, ensuring that the code is secure. I have tried to get this to work with powershell scripts, but haven't been successful.

Start your free trial to view this solution

Question Stats

Zone: OS

Question Asked By: COSMTARFCU

Solution Provided By: RobSampson

Participating Experts: 4

Solution Grade: A

Translate:

Loading Advertisement...

20080236-EE-VQP-29 / EE_QW_2_20070628