Delegating enabling a disabled account is a little more involved, well maybe
not so much so. You can't just delegate that function. The disabled flag is
maintained in useraccountcontrol which is home to lots of flags[1]. So
delegating that attribute means you delegate things other than ability to
enable/disable. You also enable password not required, etc. One way around
that would be to delegate account expiration since that can be maintained in
a single attribute. If you want to "disable" the account, you simply set the
date of expiration in the past.
To delegate useraccountcontrol
WP userAccountControl
To delegate accountexpiration
WP accountExpires
joe
[1] See
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/a
ds_user_flag_enum.asp.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bruyere, Michel
Sent: Tuesday, May 10, 2005 11:13 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Strange problem
Thanks everyone for the inputs. I used the delegation wizard but it wasn't
allowing to "re-enable" disabled account. So I decided to do that the hard
way. Actually it's fixed, seems that I was just too in a hurry.
This morning everything was working fine and I didn't change anyhting.
So it was like a "replication not done yet" issue.
Thanks!
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
