Mark Minasi's Tech Forum
Register Calendar Latest Topics Chat
 
 
 


Reply
  Author   Comment  
rickels

Still Checking the Forum Out
Registered:
Posts: 5
Reply with quote  #1 
We are a small company (35 users) and I am looking for a way to unlock user accounts without having to log on to a DC.  Since I don't have a good backup person, I am also looking for a way to give a user permissions to unlock other users without giving them administrative rights to everything else.

I have downloaded Microsoft's LockoutStatus.exe and put it on a shared drive.  It seems to work fine for an administrator, but not for a regular user.  Are there certain permissions that I could give to an "Unlock" group that would allow those members to use this tool and which would not give them too much power?  I am open to any inexpensive solution.
0
wkasdo

Avatar / Picture

Administrator
Registered:
Posts: 183
Reply with quote  #2 
Hi,

Check this: https://support.microsoft.com/en-us/help/279723/how-to-grant-help-desk-personnel-the-specific-right-to-unlock-locked-user-accounts, second method. Instead of adsiedit you can also use AD Users & Computers wit the view in Advanced mode.

You set the permissions on the OU containing the end users. If you don't have such an OU yet, create it and move the user accounts to the new OU.

__________________
[MSFT]; Blog: https://blogs.technet.microsoft.com/389thoughts/
0
cj_berlin

Avatar / Picture

Senior Member
Registered:
Posts: 199
Reply with quote  #3 
I would look into giving the users a self-service unlock capability. There used to be an excellent and free (up to 50 users) product from NetWrix but they seem to have discontinued it altogether. There may be other solutions out there, either free or fitting your budget.
__________________
Evgenij Smirnov

My personal blog (German): http://www.it-pro-berlin.de/
My stuff on PSGallery: https://www.powershellgallery.com/profiles/it-pro-berlin.de/
0
rickels

Still Checking the Forum Out
Registered:
Posts: 5
Reply with quote  #4 
wkasdo's solutions worked perfectly for us.  Thanks everyone.
0
Previous Topic | Next Topic
Print
Reply

Quick Navigation: