Title: Message
|
Hi
Yusuf,
You
need to make the property visible first.
Open
the file c:\winnt\system32\dssec.dat, search for [User], then scroll down til
you find the line lockoutTime=7, and change this to lockoutTime=0. This makes
lockoutTime visible in ACLs.
You
should then be able to grant read\write access to the lockoutTime attribute to
the groups you want to be able to unlock accounts. This gives them the access
they need. There's a knowledge base article on it, but I don't remember the
number - sorry.
HTH
dave
I am trying to delegate the
permission of "Account Unlock" to a related group.
I can under the ACL find "Reset
Password" and all the other finer stuff.
But can't seem to find the one
mentioned above.
I have used ADSI Edit to locate
"lockoutDuration" but also not sure what I should enter for the attribute
value.
Also where do I make this change
on the Domain Class?
Can anyone please
help?
Thanks in
advance.
Yusuf
______________________________________________
Disclaimer and
confidentiality note
Everything in this
e-mail and any attachments relating to the official business of Standard Bank
Group Limited is proprietary to the company. It is confidential, legally
privileged and protected by law. Standard Bank does not own and endorse any
other content. Views and opinions are those of the sender unless clearly
stated as being that of Standard Bank.
The person
addressed in the e-mail is the sole authorised recipient. Please notify the
sender immediately if it has unintentionally reached you and do not read,
disclose or use the content in any way.
Standard Bank can not assure that the integrity of this communication has
been maintained nor that it is free of errors, virus, interception or
interference.
_______________________________________________
|
