how to assign user account only enable and disable user function at AD ?

I only grant a enable/disable account function to special AD account. how to do that ?
jimlo1Asked:
Who is Participating?
 
BiniekConnect With a Mentor Commented:
Hi Jimlo1,

In Your question You asked about enable/disable account, and now You want to Unlock user account,

id does not work, because there was other permissions

There is information how to delegate the Unlock Account Right:

How can I delegate the right to unlock locked Active Directory (AD) user accounts?
http://windowsitpro.com/security/q-how-can-i-delegate-right-unlock-locked-active-directory-ad-user-accounts
0
 
BiniekCommented:
You have to delegate special permissions " Read userAccountControl and Write userAccountControl" for user accounts.

There are some instructions how to do it:

http://www.jasonprahl.com/2006/06/delegate-control-to-disableenable-user-accounts/

http://thebackroomtech.com/2009/07/01/howto-delegate-the-enabledisable-accounts-permission-in-active-directory/
0
 
jimlo1Author Commented:
Hi Biniek,

I implemened your instrustion but it doesn't work as attached
result.docx
0
 
jimlo1Author Commented:
Dear Biniek,

I followed your instruction. It is working . Thank you very much. But I found a other weird event in AD. I clicked a that checkbox in attached file and click "Apply" button. At a moment, this checkbox is unclick . Why???????????
Checkbox-.docx
0
 
jimlo1Author Commented:
Hi Biniek or experts,

Can you help to solve this problem ?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.