Security Software

I'm in a bit of a bind lately in that I cannot seem to manually (or otherwise) unlock accounts that have been locked out due to having failed password attempts.

I have a few users that consistently lock themselves out, despite my best efforts to help them not do so. Anyway, when they come to me and tell me they've gotten locked out again, I can't seem to do anything that would unlock the account.

Trying to reset the values of "passwordretrycount" and "retrycountresettime" fails, presumably because they're operational attributes and aren't really there, per se.

So, how does everyone else do it? I really can't seem to find another way to do this, other than disabling account lockouts (which isn't much of an option since this was put in place for compliance reasons), raising or lowering the retry attempt count, or lowering the retry reset time to something super low (1 or 0).

Ayudame! :)

Patrick