Solved

how to assign user account only enable and disable user function at AD ?

Posted on 2014-02-04
5
319 Views
Last Modified: 2014-02-22
I only grant a enable/disable account function to special AD account. how to do that ?
0
Comment
Question by:jimlo1
  • 3
  • 2
5 Comments
 
LVL 6

Expert Comment

by:Biniek
ID: 39834910
You have to delegate special permissions " Read userAccountControl and Write userAccountControl" for user accounts.

There are some instructions how to do it:

http://www.jasonprahl.com/2006/06/delegate-control-to-disableenable-user-accounts/

http://thebackroomtech.com/2009/07/01/howto-delegate-the-enabledisable-accounts-permission-in-active-directory/
0
 

Author Comment

by:jimlo1
ID: 39841166
Hi Biniek,

I implemened your instrustion but it doesn't work as attached
result.docx
0
 
LVL 6

Accepted Solution

by:
Biniek earned 500 total points
ID: 39841435
Hi Jimlo1,

In Your question You asked about enable/disable account, and now You want to Unlock user account,

id does not work, because there was other permissions

There is information how to delegate the Unlock Account Right:

How can I delegate the right to unlock locked Active Directory (AD) user accounts?
http://windowsitpro.com/security/q-how-can-i-delegate-right-unlock-locked-active-directory-ad-user-accounts
0
 

Author Comment

by:jimlo1
ID: 39849295
Dear Biniek,

I followed your instruction. It is working . Thank you very much. But I found a other weird event in AD. I clicked a that checkbox in attached file and click "Apply" button. At a moment, this checkbox is unclick . Why???????????
Checkbox-.docx
0
 

Author Comment

by:jimlo1
ID: 39863919
Hi Biniek or experts,

Can you help to solve this problem ?
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now