1. Open Active Directory Users and Computers, Right Click the domain and Click Delegate Control.

2. Click NEXT and add the user/users or group.

3. Click Next and select “Create a custom task to delegate

4. Click Next and select “Only the following objects in the folder” then select “User objects”.

5. Deselect General and select Property-specific then enable “Read lockout Time” and “Write lockout Time”.

6. Click FINISH, job done and you can test it.