Users allow inheritable permissions check box

Windows 2003 native domain

Since moving to Exchange 2007, some users have a problem accessing Outlook
Web Access, an error page is shown indicating a security problem within AD.

These user accounts, when checked, have the 'Allow inheritable permissions'
check box unticked. This is found from properties of the user, security tab,
advanced, a check box for 'Allow inheritable permissions'.

Enabling inheritance resolves the problem but there doesn't seem to be any
pattern as to which users have this unchecked. So far, only 5 out of 1000
have been reported and I'd like to resolve the issue for all user accounts.

Initially, I would like to identify all user accounts which have the
inheritance check box unticked, how would we achieve this without opening
each user account manually ?

It can be done using a vbscript. I have an example here
http://www.winadmin.ro/2009/11/24/cu...ive-directory/
All the text is in Romanian but I hope I will have time to translate it in
English soon. Try the script in a test environment and correct any errors
that will appear during copy/paste.

Andrei
www.winadmins.net


"B0b" <> wrote in message
news:#...
> Windows 2003 native domain
>
> Since moving to Exchange 2007, some users have a problem accessing Outlook
> Web Access, an error page is shown indicating a security problem within
> AD.
>
> These user accounts, when checked, have the 'Allow inheritable
> permissions' check box unticked. This is found from properties of the
> user, security tab, advanced, a check box for 'Allow inheritable
> permissions'.
>
> Enabling inheritance resolves the problem but there doesn't seem to be any
> pattern as to which users have this unchecked. So far, only 5 out of 1000
> have been reported and I'd like to resolve the issue for all user
> accounts.
>
> Initially, I would like to identify all user accounts which have the
> inheritance check box unticked, how would we achieve this without opening
> each user account manually ?
>
>