Link to home
Start Free TrialLog in
Avatar of sonickmc
sonickmc

asked on

Delegating Permissions not working due to AdminCount=1

We have created a group called HD_UnlockAccount.  Added a few users to it and gave delegated permissions for these users to be able to unlock accounts, reset passwords, force password changes.

The members of the group can do this for some users but not most.  Discovered that the AdminCount in ADSI properties show the majority of our users have the AdminCount=1.  I cleared the entry of one of the users and the setting keeps getting reset back to 1.
ASKER CERTIFIED SOLUTION
Avatar of LauraEHunterMVP
LauraEHunterMVP
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of sonickmc
sonickmc

ASKER

Found that the domain users group was a member of  print operators.  Removed that and ran a script to change AdminCount to 0 and inherit permissions.  This cured the problem.