Can I assign other users permissions to unlock a workstation besides the admin

I have a child domain with 2 users that are full admins to that domain BUT do not use/have the administrator logon information.  These 2 users manage thier small group of users and have come across this issue of thier login accounts unable to unlock a workstation within their child domain.  I am wanting to give these 2 users permissions (somehow) to unlock a workstation within thier domain.  Is that possible?  or is the administrator login info and the user the only people who can unlock the station?

The workstations are IBM Thinkcenters running Windows XP: Pro on a Windows 2003 server child/sub domain.
kathy_harveyAsked:
Who is Participating?
 
Joseph TshiteyaConnect With a Mentor Commented:
As long as your "sub" admins are members of the local machine Administrators group or are member of the sub-domain Domain Admins group and that group is a member of each machine's local Administrators group, then they should be able to unlock workstations locked by end-users.
0
 
Bird DogConnect With a Mentor Commented:
If these two users are in domain admins groujp they should be able to unlock the computers. Also if you add these two users on the local machine to the administrators group they should then be able to unlock the computer.
0
 
kathy_harveyAuthor Commented:
Those permission changes you are talking about, is there a way I can do it via group policy or will I have to add them on each workstation?
0
 
Bird DogConnect With a Mentor Commented:
I would test on a couple of machines first I will check for the group policy thing but I don't remember seeing it. What about adding them to the domain admin group on your server. this will give you close to the same result.
0
 
kathy_harveyAuthor Commented:
I am about to test the Domain Admin permission very soon to confirm.  I dug in GP and couldn't find it either but like we all know it is a maze in there!!!  I am so very thankful of all the fast responses and I will be awarding points very soon.  

Oh and I am wanting to just push the LOCAL admin permission via group policy but I don't think it can be done, just hoping.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.