Delegating Enable / Disable Account to a security group


I've just written a short piece of VBscript to enable and disable a group of users in an OU.  The .vbs works perfectly when I run it as admin, but when I run it as anyone else it responds with

General Access Denied Error
Active Directory

I've attempted to delegate Read userAccountControl and Write userAccountControl to a staff admin group.  But the permission doesn't delegate and the .vbs still fails with the same problem.
Mike TwistIT ManagerAsked:
Who is Participating?
ry_berkConnect With a Mentor Commented:
Take a look at this link:

It explains about delegation and how to accomplish it.

If you've already tried this and the script is still not working, please get back to us.
Mike TwistIT ManagerAuthor Commented:
Excellent link to an excellent tutorial.  Works like a charm.  As it turns out I created the security group with the correct permissions, but failed to correctly delegate it to the OU.  Thanks.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.