[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Delegate user to disable user account only Windows 2008 R2

Posted on 2010-11-15
3
Medium Priority
?
1,758 Views
Last Modified: 2012-05-10
I have modified a scipt that I fould that allows a user to enable/disable a user account, the script works great , no errors. Heres my problem, I need to allow store managers to disable user accounts for our their store and only disable the account.
I have set up an OU for each store and delagateed the store manager to that OU, but hte only option the wizrad allows that is even close is to create/delete and change a user. I do not want to give my managers that much access. How do I only allow them to disable an account for their OU?
0
Comment
Question by:TheonWier
3 Comments
 
LVL 27

Accepted Solution

by:
KenMcF earned 500 total points
ID: 34138521
You need to give them access to useraccountcontrol Brian Desmond has a good blog post on how to do this.

http://briandesmond.com/blog/delegating-enable-disable-account-rights-in-active-directory/
0
 
LVL 24

Expert Comment

by:Awinish
ID: 34143143
0
 

Author Closing Comment

by:TheonWier
ID: 34284526
not the answer I was looking for
0

Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question