You can use the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in to grant trusted users the authority to unlock other users’ accounts. Sysinternals’ LogonSessions tool lets you see which users are logged on and what programs they’re currently using. The value defined for any policy in a Group Policy Object (GPO) overrides any value defined for the same policy in a computer’s local policy object.
Every month, Randy Franklin Smith answers your questions about Windows security. Click the links above to see individual Q&As from this month's column. Send your questions to Randy at [email protected].