|
How
can I add an "unlock user account"
option to the Active Directory Users
and Computers context menu?
One of
the daily tasks of a network
administrator is to monitor user
accounts, logo activities, password
changes and account options, such as
disabling and enabling user
accounts.
When an administrator
wants to disable a user account he
or she has quite a few options. One
method is do disable or enable the
account via a specific script, a
DSMOD USER command (in Windows
Server 2003) or through the built-in
Active Directory Users and
Computers snap-in (also known as
DSA.MSC). One more task regularly
performed by administrators might be
to unlock user accounts after they
have forgotten their passwords and
were locked out by the system.
Enabling user accounts is different
from unlocking these accounts,
because the action needed to disable
the account is performed by the
administrator, whereas the action
needed to lockout the account is
done by the users themselves, and
unless caused by a security
penetration or hack attempt, usually
indicates that the user has
attempted to logon to the system
with a bad password, more times than
specified in the Account Lockout
Threshold parameter in the GPO of
the system. |
