Solved

Delegate user to disable user account only Windows 2008 R2

Posted on 2010-11-15
3
1,666 Views
Last Modified: 2012-05-10
I have modified a scipt that I fould that allows a user to enable/disable a user account, the script works great , no errors. Heres my problem, I need to allow store managers to disable user accounts for our their store and only disable the account.
I have set up an OU for each store and delagateed the store manager to that OU, but hte only option the wizrad allows that is even close is to create/delete and change a user. I do not want to give my managers that much access. How do I only allow them to disable an account for their OU?
0
Comment
Question by:TheonWier
3 Comments
 
LVL 27

Accepted Solution

by:
KenMcF earned 250 total points
ID: 34138521
You need to give them access to useraccountcontrol Brian Desmond has a good blog post on how to do this.

http://briandesmond.com/blog/delegating-enable-disable-account-rights-in-active-directory/
0
 
LVL 24

Expert Comment

by:Awinish
ID: 34143143
0
 

Author Closing Comment

by:TheonWier
ID: 34284526
not the answer I was looking for
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question