Browsing articles tagged with " AD"

Delegate unlock account privileges

So you want to delegate permissions to unlock accounts, as well as reset passwords for users in your domain? It’s not as straight forward as it should be. First, you have to edit %Systemroot%\System32\Dssec.dat to make the property visible. Open the file in notepad; find the [user] section, and change lockoutTime from 7 to 0. Close and save. Now open Active Directory Users & Computers: Go to properties on the desired OU Go to Security-Advanced […]