Enable Active Directory Admin Override Extensions

When this policy is enabled, the 'Screen Pass unlock' right (an Active Directory extended right) is used as one method of determining if a proposed Admin ID can unlock another user's login session. For this policy to be effective, the Screen Pass Unlock right must be added to the directory. Administrators can do so using the Screen Pass extended right tool.\n\nOther methods of determining Admin override permission (such as membership in the 'Screen Pass' group, 'paired groups', or standard Domain Admin rights) still apply whether or not this policy is enabled.

0. Enable ADS Admin Override Extensions
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Birch Grove\Screen Pass\Admin6
   Value Name	EnableADAdminOverrideExtensions
   Value Type	REG_DWORD
   Value	1

1. Do NOT enable extensions
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Birch Grove\Screen Pass\Admin6
   Value Name	EnableADAdminOverrideExtensions
   Value Type	REG_DWORD
   Value	0