How to delegate right to unlock locked Active Directory (AD) user accounts?

To delegate the right to unlock user accounts on the OU or domain level in ADUC, you can use the AD delegation wizard.

 

You must perform the following steps.

 

1. Open “Active Directory Users and Computers”

 

PowerShellTip: Use PowerShell to Find User Profile Path

To easily get information about the folder and path to the profile for a currently signed-in user, use environmental variable UserProfile.

[PS]$env:UserProfile

This can be useful in scripts.