Here is the process to create a custom delegation to allow users (other than Domain Admins) to access Bitlocker Recovery keys. Log into AD Users and Computers Make a new Security group called “deleg-computer-bitlockerrecovery” Add the relevant users to the group Navigate to the OU where you want to start the delegation. Right-click on the…
We had an instance where a user changed positions and because of that change his group membership changed. When his group membership changed he started getting messages about his account being locked out when trying to logon to the system. We would unlock his account, but within a few minutes it would lock again. We…
At work we have our AD set up so that when we add a new computer to the domain the computer account gets redirected to an OU that we created instead of the default location of “Computers”. I’ve wondered how that was done for some time, but never took a minute to search. So today I was setting up a lab environment and decided to look into redirecting new computer accounts. What I found out was it is really easy to do. All you do is run one command from a command prompt on our Domain Controller and your done.…
We have a lot of users that have been delegated access to other accounts. For the most part this doesn’t cause a problem, but problems do come up on occasion. The biggest problem is when someone who had been granted delegate permissions on another account leaves. We generally remove the account, but what happens to the delegates in Outlook when you do that? Well when you look at the delegates tab you see the person’s name who left with “(Not Found)” after it.…
