You can't restrict the domain admins from doing things. You will need to use the deligate authority feature of AD to give users or a group the right to unlock accounts.
Denny
MCSA (2003) / MCDBA (SQL 2000)
--Anything is possible. All it takes is a little research. (Me)
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.