I need to delegate permission for certain users to be able to unlock accounts. I created a new users and a new security group. I added the new user to the new group. I ran the delegate control wizard and followed the instructions in http://support.microsoft.com/?kbid=294952. When I tried to unlock a user that had gotten locked out that was in another group, the unlock field was greyed out. These users need to be able to unlock accounts in all groups.

Are you sure you've given the right group the right to unlock accounts? Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Best regards.

Hi, Please have a look on following article. Specifically, see the workaround steps: http://support.microsoft.com/kb/817433/ Following article or thread also mentioned similar issue: Delegate unlock user account access in Server 2008 http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/c17a8020-13cc-49f3-932e-a99c73268f70 AdminSDHolder Object Affects Delegation of Control for Past Administrator Accounts http://support.microsoft.com/kb/306398/Shaon Shan| TechNet Subscriber Support in forum| If you have any feedback on our support, please contact tngfb@microsoft.com

Your problem is still persisting? Best regards.