• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 639
  • Last Modified:

Account lockout reset script.

I am looking for a solution to account lockout problem.  One of the networks(a large church) I am a admin for has one specific account that all the students use in their web cafe.  At least once a week I get a call from the youth director asking me to unlock the account in active directory because one of the kids had tried the password to many times.  Is there a way to script a program or MMC that I can give the youth director access to that will unlock the account at a click of a button? I don't want to give him access to the entire directory and know its only as simple as unchecking a box in the account properties, but that requires me to connect to the VPN, log in the server and then open AD.  Any suggestions?
0
Intech-LLC
Asked:
Intech-LLC
1 Solution
 
KCTSCommented:
You will need to delegate the right to unlock accounts to the user - ot better still deleate the right to unlock accounts to a group and make the use a member of that group - even if initially they are the only member - it will make it so much easier when you want to change the user rights by simply adding/removing them from the group.
The process for delegating the right is detailed at http://support.microsoft.com/kb/294952

Once the use has the delegated right then you can use a script such as that at http://www.tech-geeks.org/geeklog/article.php?story=20040308172322741 to unlock the account
0
 
Intech-LLCAuthor Commented:
Exactly what I was looking for! Thank you so much.  
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now