Site Overlay

Active Directory Unlock Account Permission

Active Directory Unlock Account Permission

AD "Unlock Account" unlock authorization

Follow the steps below to authorize some staff in your IT team to unlock an account that is only in the "Unlock account" state in "Active Directory".

image 8
Image of a locked account in Active Directory
image 9
1. RIGHT-click on the OU where the Computer Objects are kept. Select the "Delegate Control" window. After you have selected which users or groups to define this authorization for, proceed to the next step.
image 10
Select "Create a custom task to delegate".
image 11
Let's select "User Objects".
image 12
Property-specific, Read lockoutTime, Write lockout Time are selected.