Unlocking Active Directory Accounts

[parentkiller]

I needed the ability to allow my help desk to unlock accounts in active directory. I found KB294952 and was able to get it working. The only problem is that the helpdesk cannot unlock each other. I can see where that would be a good thing from a security standpoint however I need to give them the ability to unlock each other's account. I have tried several things but something is removing the security I put in place to allow this. Does anyone know how I can solve this? Thanks.

 

[TechLad]

Take a look at KB327709, has some info on same level security

"Be Excellent To Each Other"