Hi. How can allow a user (Domain User?) to log on to a DC, and unlock user accounts?. I've created a Group called "SuperUsers". I've added the group Superusers to the Remote Desktop Users, and added the group in the "Allow logon through Terminal Services" option in Local Security Policy - and set the Read/Write lockout properties on user accounts. But when the users tries to start mmc.exe, the users is asked for Administrator credentials. I know that you can do it with Remote Desktop Administrative Tools - but it's an assignment, where it has to be done on the Domain Controller. |
↧
Superuser on Domain Controller
↧