How to Delegate a user or a group to unlock a user account

To unlock a user account you will need to have Read/Write access to "Lockout time". The following will show you how to delegate a user/group to unlock an account.

1. Right click on the Organizational Unit where the user accounts are located.
2. Select "Delegate Control" from the menu.
3. Delegation of Control Wizard will pop up. Click Next.
4. In the "users or groups" dialog box, click "Add" to add a group or a user.
5. After successfully adding the user or group, click Next.
6. In "Tasks to Delegate" box, choose "Create a custom task to delegate" and click Next.
7. In the "Active Directory Object Type" choose "Only the following objects in the folder" and then from the available choices choose "User objects" and click Next.
8. In "Permissions" box, choose "Property-specific" checkbox. Then choose "Read lockout Time" and "Write Lockout Time" from the list of permissions.
9. Click Finish.