Solved

how to assign user account only enable and disable user function at AD ?

Posted on 2014-02-04
5
326 Views
Last Modified: 2014-02-22
I only grant a enable/disable account function to special AD account. how to do that ?
0
Comment
Question by:jimlo1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 6

Expert Comment

by:Biniek
ID: 39834910
You have to delegate special permissions " Read userAccountControl and Write userAccountControl" for user accounts.

There are some instructions how to do it:

http://www.jasonprahl.com/2006/06/delegate-control-to-disableenable-user-accounts/

http://thebackroomtech.com/2009/07/01/howto-delegate-the-enabledisable-accounts-permission-in-active-directory/
0
 

Author Comment

by:jimlo1
ID: 39841166
Hi Biniek,

I implemened your instrustion but it doesn't work as attached
result.docx
0
 
LVL 6

Accepted Solution

by:
Biniek earned 500 total points
ID: 39841435
Hi Jimlo1,

In Your question You asked about enable/disable account, and now You want to Unlock user account,

id does not work, because there was other permissions

There is information how to delegate the Unlock Account Right:

How can I delegate the right to unlock locked Active Directory (AD) user accounts?
http://windowsitpro.com/security/q-how-can-i-delegate-right-unlock-locked-active-directory-ad-user-accounts
0
 

Author Comment

by:jimlo1
ID: 39849295
Dear Biniek,

I followed your instruction. It is working . Thank you very much. But I found a other weird event in AD. I clicked a that checkbox in attached file and click "Apply" button. At a moment, this checkbox is unclick . Why???????????
Checkbox-.docx
0
 

Author Comment

by:jimlo1
ID: 39863919
Hi Biniek or experts,

Can you help to solve this problem ?
0

Featured Post

Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question