Delegating Enable / Disable Account to a security group

Hi,

I've just written a short piece of VBscript to enable and disable a group of users in an OU.  The .vbs works perfectly when I run it as admin, but when I run it as anyone else it responds with

General Access Denied Error
80070005
Active Directory

I've attempted to delegate Read userAccountControl and Write userAccountControl to a staff admin group.  But the permission doesn't delegate and the .vbs still fails with the same problem.
LVL 1
Mike TwistIT ManagerAsked:
Who is Participating?
 
ry_berkConnect With a Mentor Commented:
Take a look at this link:

http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html

It explains about delegation and how to accomplish it.

If you've already tried this and the script is still not working, please get back to us.
0
 
Mike TwistIT ManagerAuthor Commented:
Excellent link to an excellent tutorial.  Works like a charm.  As it turns out I created the security group with the correct permissions, but failed to correctly delegate it to the OU.  Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.