delegate control wizard:
create a custom task to delegate
active directory object type – only the following objects in the folder: user objects
permissions, clear “general” checkbox, check “property-specific” checkbox
select read lockouttime and write lockouttime
complete wizard

source:
https://support.microsoft.com/en-us/kb/294952

Comments are closed.