I have a user that I want to delegate the ability to create/delete users in the OU, disable accounts, and unlock user accounts when needed.
I did the delegate wizard in AD users and computers and the user can create the Account but cannot unlock a locked account. Placed a check box in all Objects under delegate the following common tasks.
I also went under crate a custom task to delegate and gave full control to all objects and this still had no effect.
In addition I also added this user to the account operator group and had no effect.
Any suggestions would be greatly appreciated.
Thanks