• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1774
  • Last Modified:

Delegate user to disable user account only Windows 2008 R2

I have modified a scipt that I fould that allows a user to enable/disable a user account, the script works great , no errors. Heres my problem, I need to allow store managers to disable user accounts for our their store and only disable the account.
I have set up an OU for each store and delagateed the store manager to that OU, but hte only option the wizrad allows that is even close is to create/delete and change a user. I do not want to give my managers that much access. How do I only allow them to disable an account for their OU?
0
TheonWier
Asked:
TheonWier
1 Solution
 
KenMcFCommented:
You need to give them access to useraccountcontrol Brian Desmond has a good blog post on how to do this.

http://briandesmond.com/blog/delegating-enable-disable-account-rights-in-active-directory/
0
 
AwinishCommented:
0
 
TheonWierAuthor Commented:
not the answer I was looking for
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now