A useraccount is locked after he entered the wrong password a couple of times. To unlock those accounts it is necessary to delegate the right to edit the Active Directory Attribute lockOutTime.
With DSACLS you can do this as follows:
dsacls ou=testou,dc=mydomain,dc=com /I:S /G:RPWP;user:lockOutTime
Answer: You just did ;-) Please keep this example at the bottom of the page, copy and paste if you need a template for your own.
Question: How can I create a sample of an question?