Archived from groups: microsoft.public.win2000.active_directory (More info?)
Create OU, right click, ... Delegation and here you can delegate anything to
"praveen" <email@example.com> wrote in message
> Dear All,
> I want to assign some of the user to the Account Operators group who can
> then Administer user accounts.
> Though these user are assigned to the "Account Operators" group they are
> unable to :
> 1. Reset the passwords
> 2. Move user from one organisation to another
> 3. Unlock domain accounts
> 4. Add users to the Account user group.
> When these user who are members of Account Operators group try to do the
> above functions, the error we get is:
> "General access denied error"
> I think the Account Operators group has to be configured to do what it has
> to do, I dont know how, or I may be totally wrong, please advice how to
> the AO group.
> Thanks in advance.