Allow users to Unlock Account and Reset Password
I was under the impression that this software allowed users to unlock their accounts and reset their passwords without having to make AD changes. However, it's come to my attention that in order to unlock their account they need the Read lockout Time and Write lockout Time permissions delegated to them in order to unlock their own account. Is it acceptable form to give all end users this permission and would they then be allowed to unlock any and all accounts?