在GE环境下，我通过图形界面ADUC可以解锁一个员工账号，但是通过powershell命令却提示权限不足，咋回事？
PS C:\Users\814072> Unlock-ADAccount -Identity XXXXXX
Unlock-ADAccount : Insufficient access rights to perform the operation
At line:1 char:1
+ Unlock-ADAccount -Identity XXXXXX
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (XXXXXX:ADAccount) [Unlock-ADAccount], ADException
+ FullyQualifiedErrorId : Insufficient access rights to perform the operation,Microsoft.Active
Directory.Management.Commands.UnlockADAccount
网上搜了一下，通过MS的hotfix解决了，供大家参考：
http://support.microsoft.com/kb/2577917