Link to home
Start Free TrialLog in
Avatar of jimlo1
jimlo1

asked on

how to assign user account only enable and disable user function at AD ?

I only grant a enable/disable account function to special AD account. how to do that ?
Avatar of Biniek
Biniek
Flag of Poland image

You have to delegate special permissions " Read userAccountControl and Write userAccountControl" for user accounts.

There are some instructions how to do it:

http://www.jasonprahl.com/2006/06/delegate-control-to-disableenable-user-accounts/

http://thebackroomtech.com/2009/07/01/howto-delegate-the-enabledisable-accounts-permission-in-active-directory/
Avatar of jimlo1
jimlo1

ASKER

Hi Biniek,

I implemened your instrustion but it doesn't work as attached
result.docx
ASKER CERTIFIED SOLUTION
Avatar of Biniek
Biniek
Flag of Poland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jimlo1

ASKER

Dear Biniek,

I followed your instruction. It is working . Thank you very much. But I found a other weird event in AD. I clicked a that checkbox in attached file and click "Apply" button. At a moment, this checkbox is unclick . Why???????????
Checkbox-.docx
Avatar of jimlo1

ASKER

Hi Biniek or experts,

Can you help to solve this problem ?