General Access Denied error while unlocking an Account programmatically

Hi,

I use the following code to reset a locked account:

userid = "someUser"
Set objUser = GetObject("WinNT://server/" & userid)
objUser.AccountDisabled = False
objUser.SetInfo
Set objUser = Nothing

But I get the following error when executed while logging as a user with delegated privileges:

Active Directory error '80070005'
General access denied error

I followed the same steps mentioned in the microsoft KB article for delegating permissions:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/delestep.mspx

Is there anything I have missed out?

Please help..

Regards,
nganesh.
LVL 1
nganeshAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
oBdAConnect With a Mentor Commented:
Yes, you missed to set the proper permissions--which is not really your fault, because the "unlock account" permissions are hidden by default. You can either edit the dssec.dat file to show this in the regular ADUC MMC (which is what I do), or go directly at it with ADSIEdit.

How To Delegate the Unlock Account Right
http://support.microsoft.com/?kbid=294952

HOW TO: Grant a User the Right to Unlock a Locked Account
http://support.microsoft.com/?kbid=312012
0
 
nganeshAuthor Commented:
Excellent... Thanks a lot for the same....

Regards,
nganesh.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.