some of the user account inheritance setting automatic disable hel

Discussion in 'Active Directory' started by mr555, Nov 6, 2009.

  1. mr555

    mr555 Guest

    Hi All

    I have run into a strange problem where a group of user allow inheritance
    permission disabled automaticlly

    We have assigned delegated permission for IT support global group to unlock
    all users accounts thats under All Staffs OU, support staffs complained they
    can't unlock staffs that belongs to the IT support groups, for general users
    working fine.

    Checked each user within the IT support global groups delegate permision is
    missing for support staffs account , under advance > allow inheritance
    permission was uncheck.
    I tick the allow inheritance permission box , half an hour later inheritance
    setting automatic disable.

    hope some of you may be able to help

    Thanks
     
    mr555, Nov 6, 2009
    #1
    1. Advertisements

  2. Rich Crandall, Nov 6, 2009
    #2
    1. Advertisements

  3. Good article. I think you may have forgot to mention (unless I missed it)
    the PDC Emulator also acts as an NT4 PDC for the NT4 BDCs in a Windows
    2000+/NT4 mixed environment. :)


    --
    Ace

    This posting is provided "AS-IS" with no warranties or guarantees and
    confers no rights.

    Please reply back to the newsgroup or forum for collaboration benefit among
    responding engineers, and to help others benefit from your resolution.

    Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
    2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer

    For urgent issues, please contact Microsoft PSS directly. Please check
    http://support.microsoft.com for regional support phone numbers.
     
    Ace Fekay [MCT], Nov 6, 2009
    #3
  4. Meinolf Weber [MVP-DS], Nov 6, 2009
    #4
  5. This sounds like you are getting bit by Protected Groups and AdminSDHolder.
    This is normal.

    The best artcile I have ever seen on this was written by MVP John Policelli
    at:
    http://policelli.com/blog/?p=136

    --
    Paul Bergson
    MVP - Directory Services
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, 2003, 2000 (Early Achiever), NT4
    Microsoft's Thrive IT Pro of the Month - June 2009

    http://www.pbbergs.com

    Please no e-mails, any questions should be posted in the NewsGroup This
    posting is provided "AS IS" with no warranties, and confers no rights.
     
    Paul Bergson [MVP-DS], Nov 6, 2009
    #5
  6. mr555

    mr555 Guest

    mr555, Nov 9, 2009
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.