The Screen Pass extended right utility allows administrators to create a special Active Directory right that allows administrators to unlock other users' workstations. This is a method, separate from paired groups and available under ADS only, for declaring administrators for unlocking purposes. Once the extended right is added to the tree, administrators can grant the inheritable Screen Pass unlock right using Active Directory for Users and Computers. The extended right can also be easily removed using the extended right utility. Extended rights are a modification to the schema.