Active Directory Delegation

Here we want to discuss how to delegate certain tasks in Active Directory.

Unlocking of locked useraccounts

A useraccount is locked after he entered the wrong password a couple of times. To unlock those accounts it is necessary to delegate the right to edit the Active Directory Attribute lockOutTime.

With DSACLS you can do this as follows:

 dsacls ou=testou,dc=mydomain,dc=com /I:S /G:RPWP;user:lockOutTime

Question: How can I create a sample of an question?

Answer: You just did ;-) Please keep this example at the bottom of the page, copy and paste if you need a template for your own. Question: How can I create a sample of an question?