4

I just delegated control to a helpdesk user in Active Directory Users and Computers to be able to unlock accounts and reset passwords. This functionality works good in ADUC but doesn't work in ADAC, it tells her she doesn't have sufficient rights.

How do I give her rights in ADAC?

3

This is a know issue. Microsoft provides a hotfix and a workaround:

  • Grant the "Read account restrictions" and "Write account restrictions" permissions to the user account.

Granting the "Read account restrictions" and "Write account restrictions" permissions to the user account will enable the user account to perform account configurations that may affect the security of the account and of the domain.

| improve this answer | |
  • Thank you! I did search and couldn't find anything on it. That makes a lot more sense. I appreciate you taking the time to provide the article. – Ryan Jul 9 '19 at 14:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.