Author Posts

February 23, 2018 at 5:58 pm

Hi There,

I have access to unlock AD accounts via the "Active Directory Users and Computers" console, however, if I try the same thing from the command line (Unlock-ADAccount) the system shows a "insufficient access rights" error even though I open the PS console with the account having rights to do that AND even enter the same account using the -Credentials parameter.

What's going on?

February 23, 2018 at 6:23 pm

Are you running powershell as admin?

February 23, 2018 at 6:33 pm

Yes, that account has domain admin rights.

To perhaps clarify this, I open the AD console using my domain admin account (Run As) and I can unlock accounts, I open the PS console using the same account, no dice.

February 23, 2018 at 6:40 pm

Check out this

Also running it with an account that has Domain Admin rights, is not the same thing as running powershell as administrator. Does the powershell bar says "Windows Powershell" or does it say "administrator: Windows powershell" ?

February 23, 2018 at 7:25 pm

Well my friend, I have to thank you for that link, applying the Hotfix mentioned solved the problem.