none
Windows2000 Lockout Security Group RRS feed

  • Question

  • Dear All,

    I would like to create a securtity group which allows you can resolved to locked out account. I use windows 2000 AD.

    Thank You!

    Norbi


    Norbert.Sos

    Thursday, November 22, 2012 8:48 AM

Answers

All replies

  • Hi Norbert,

    You may create a group of users whose password will never expired. therefore they will be free from account locked out. Alternative you may also set a group policy for the group of users to have unlimited re-tries for account lock out.


    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    Microsoft Geeks

    • Proposed as answer by Soh.M Thursday, November 22, 2012 2:48 PM
    • Unproposed as answer by Kevin Remde Saturday, November 24, 2012 1:33 PM
    Thursday, November 22, 2012 2:47 PM
  • Norbi,

    I'm not sure what you're asking.  Are you wanting to establish a group of users who can unlock other people's locked accounts?  Or do you want to set different account policies with different lockout thresholds for different groups of users?

    Kevin


    Kevin Remde US DPE - IT Evangelism - Microsoft Corporation http://blogs.technet.com/kevinremde http://twitter.com/kevinremde

    Saturday, November 24, 2012 11:58 AM
  • Hi Kevin, 

    The users unlock other people's locked accounts and they can change password but nothing else.

    Thank You!

    Norbi


    Norbert.Sos

    Saturday, November 24, 2012 12:20 PM
  • I found some information on delegating other users the right to unlock accounts.  The article pertains to Windows 2000, but it might work for your situation: http://support.microsoft.com/default.aspx?scid=kb;EN-US;279723

    Here's a thread in the Windows Server Management forum that asked and answered a similar question: http://social.technet.microsoft.com/Forums/en-US/winserverManagement/thread/3f0dbf8e-636b-45fe-93db-f788d5b976fd/

    Other than that, I suggest you ask this kind of question in the Directory Services forum: http://social.technet.microsoft.com/Forums/en/winserverDS/threads

    Hope this helps,

    Kevin


    Kevin Remde US DPE - IT Evangelism - Microsoft Corporation http://blogs.technet.com/kevinremde http://twitter.com/kevinremde

    • Marked as answer by Kevin Remde Saturday, November 24, 2012 1:33 PM
    Saturday, November 24, 2012 1:30 PM