How to allow a user to unlock user accts from XP box?
Tammy
We are using SBS2003 Premium (no SP1) in a small office with approx 14
workstations running Windows XP Pro SP2.
I believe my question is simple :-)
When myself, or our developer are not available, and a user account is
locked they have to wait until either one of us are available to unlock the
account. We want to provide this capability to a designated user in the
office but I was hoping they could do this task from their workstation, as
opposed to the server. I could provide them instructions for how to do on
the server (in Server Management) but really do not want them on there for
obvious reasons.
Any tips on how to accomplish this? User accounts are configured to lockout
after 10 failed attempts so this will not happen very often but still would
be handy.
Thanks so much in advance!
Tammy
Dave Nickason [SBS MVP]
password errors that I remember. You can set lockout to automatically
unlock after X minutes, but unless it's a fairly long period, you risk
allowing someone to resume a dictionary attack if that's what caused it. I
don't have lockout automatically unlock because I want to know what locked
the account first.
AFAIK there's no way to unlock an account other than in AD, and the only
alternative to letting someone log in at the server is RDP. I gave my boss
printed instructions on how to remote into the server from his desktop to
unlock accounts, but he's never had to do it. That way, he doesn't have an
admin-level account himself, but would use the built-in administrator
account over RDP if he had to unlock somebody.
"Tammy" <Ta...@discussions.microsoft.com> wrote in message
news:91453DE7-D05C-4605...@microsoft.com...
Steve
to enter name/password incorrectly 10 times without realizing that something
is wrong and perhaps an administrator should be contacted.
"Dave Nickason [SBS MVP]" <gwdi...@NOSPAM.frontiernet.net> wrote in message
news:ugEiBBSH...@TK2MSFTNGP09.phx.gbl...
/kj
tools on the users XP SP1+ workstation and delagate the user the permissions
to reset the account lockout.
It can be done programatically and with .net 2.0 a little easier. Someone
with good scripting skills could do this for you or perhaps already have.
Check in the scripting newsgroups or "ScriptCenter".
/kj
"Tammy" <Ta...@discussions.microsoft.com> wrote in message
news:91453DE7-D05C-4605...@microsoft.com...
Tammy
have the lockout set to reset after 30 mins but I think I will disable
that...as per your reasons below. Not sure why it was at 30 in the first
place! Do what this more secure.
Thank you again for your assistance with this and have a great weekend!
Tammy
Tammy
downloaded them but for my use right now. :-)
/kj
simple snipit of script to do this on scriptcenter. Worked quite well on my
dev/test domain.
/kj
"Tammy" <Ta...@discussions.microsoft.com> wrote in message
news:9D8FEA03-1B21-48C0...@microsoft.com...
Nobody
It allows you to select which users can unlock a computer (either unlock
completely or force the current user to shutdown)
Users don't have to be administrators to unlock.
Post back with your feedback.
"Tammy" <Ta...@discussions.microsoft.com> wrote in message
news:91453DE7-D05C-4605...@microsoft.com...
- SBITS.Biz Support@removethis.sbits.biz Russ - SBITS.Biz (MCP SBS)
uh? Did you realize that you replied to a post that is from Jan 19th 2006?
I don't think Tammy is probably still following this thread.
Is your Date Field on Outlook Express Reversed? (Showing Oldest First?)
Russ
--
Russell Grover
Microsoft Certified Small Business Specialist.
MCP, MCPS MCNPS, (MCP-SBS)
MSN Messenger
Support @ SBITS.Biz
http://www.SBITS.Biz
Search for your answer
http://groups.google.com/group/microsoft.public.windows.server.sbs?lnk=lr&hl=en
"Nobody" <nob...@microsoft.com> wrote in message
news:12gsgeg...@news.supernews.com...
Nobody
dates are not reversed.
At first I thought your message was really near sighted (I did not want to
say stupid and pointless) and I was planning on ignoring it but I figured
that even a Microsoft Certified Small Business Specialist may not realize
that these messages all get archived and people will be Googling this topic
in the future - that is how I can across it. Seeing that the thread went
dead without a decent answer, I decided to add to it. Tammy may have had
already solved her problem but maybe others investigating a similar problem
may find my comments useful. I doubt anyone will find your comments
userful - except from the chuckle your signature provides. Unfortunately,
these people will now have to wade though some of the non-sense you started.
I hope you learn something from this and think before making another posting
like this.
"Russ - SBITS.Biz (MCP SBS)" <Russ - SBITS.Biz (MCP SBS)
Sup...@REMOVETHIS.SBITS.Biz> wrote in message
news:uSWuJVv2...@TK2MSFTNGP06.phx.gbl...
- SBITS.Biz Support@removethis.sbits.biz Russ - SBITS.Biz (MCP SBS)
LMAO,
I need to learn something? LMAO
That program isn't needed. The solution was given for FREE!
My goal is to save my customers money, Not to have them buy useless
software...
Russ
--
Russell Grover
Microsoft Certified Small Business Specialist.
MCP, MCPS MCNPS, (MCP-SBS)
MSN Messenger
Support @ SBITS.Biz
http://www.SBITS.Biz
Search for your answer
http://groups.google.com/group/microsoft.public.windows.server.sbs?lnk=lr&hl=en
"Nobody" <nob...@microsoft.com> wrote in message
news:12gsrre...@news.supernews.com...