I have a child domain with 2 users that are full admins to that domain BUT do not use/have the administrator logon information. These 2 users manage thier small group of users and have come across this issue of thier login accounts unable to unlock a workstation within their child domain. I am wanting to give these 2 users permissions (somehow) to unlock a workstation within thier domain. Is that possible? or is the administrator login info and the user the only people who can unlock the station?
The workstations are IBM Thinkcenters running Windows XP: Pro on a Windows 2003 server child/sub domain.