Solved

Account lockout reset script.

Posted on 2008-10-31
2
632 Views
Last Modified: 2012-08-14
I am looking for a solution to account lockout problem.  One of the networks(a large church) I am a admin for has one specific account that all the students use in their web cafe.  At least once a week I get a call from the youth director asking me to unlock the account in active directory because one of the kids had tried the password to many times.  Is there a way to script a program or MMC that I can give the youth director access to that will unlock the account at a click of a button? I don't want to give him access to the entire directory and know its only as simple as unchecking a box in the account properties, but that requires me to connect to the VPN, log in the server and then open AD.  Any suggestions?
0
Comment
Question by:Intech-LLC
2 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 250 total points
ID: 22855053
You will need to delegate the right to unlock accounts to the user - ot better still deleate the right to unlock accounts to a group and make the use a member of that group - even if initially they are the only member - it will make it so much easier when you want to change the user rights by simply adding/removing them from the group.
The process for delegating the right is detailed at http://support.microsoft.com/kb/294952

Once the use has the delegated right then you can use a script such as that at http://www.tech-geeks.org/geeklog/article.php?story=20040308172322741 to unlock the account
0
 

Author Closing Comment

by:Intech-LLC
ID: 31512241
Exactly what I was looking for! Thank you so much.  
0

Join & Write a Comment

Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
Synchronize a new Active Directory domain with an existing Office 365 tenant
Learn the basics of strings in Python: declaration, operations, indices, and slicing. Strings are declared with quotations; for example: s = "string": Strings are immutable.: Strings may be concatenated or multiplied using the addition and multiplic…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now