Skip to content

Platform: Active Directory

On-premises users, groups, OUs, Group Policy and sync.

Disable a leaver’s account
The ticket: Leaver: Radia Perlman – last day today 17:00
What you'll practise
- Find Radia
- Disable the account
- Set the description
- Move to Disabled Users
- Why not delete?
Disabling and moving accounts needs Account Operators at dont. Helpdesk Operators can only reset and unlock.
October 19, 2026
Give access to a file share with a group
The ticket: Access to \fs01Finance (read/write)
What you'll practise
- Find Elizabeth
- Open Add to a group
- Add GG-Finance-Share
- Explain when it works
At dont, Tier 1 can change membership of groups in DONT › Groups through the delegated Group Managers group.
October 19, 2026
Reset a domain password
The ticket: Forgot my Windows password – now locked out
What you'll practise
- Verify the caller
- Find Alan's account
- Reset and unlock
- Tell Alan what happens next
At dont, Tier 1 is delegated Reset Password on DONT › Staff. Domain Admin isn't needed.
October 19, 2026
Unlock a locked-out account
The ticket: "The referenced account is currently locked out" at Windows sign-in
What you'll practise
- Go to the Engineering OU
- Open Ken's Account tab
- Unlock the account
- Stop it happening again
At dont, Tier 1 is delegated the right to unlock accounts and reset passwords on DONT › Staff.
October 19, 2026
Create a new starter from a template
The ticket: New starter: Hedy Lamarr – Engineering – starts today
What you'll practise
- Find the template
- Start the copy
- Create Hedy's account
- Check what was copied
Creating accounts needs Account Operators at dont.
October 19, 2026