User rights in OUs

Discussion in 'Active Directory' started by Jesper Stein, May 18, 2004.

  1. Jesper Stein

    Jesper Stein Guest

    I have put my users in to OUs, and I have tryed to delegate control to a
    user so he can change phone numbers and so on. But the users do not have the
    same security settings. Only some users have the group i have delegated
    control to, in the security list (Advanced view, and then properties on the
    user). How can i force the rights from the OU down on the users inside it?

    Best regards
    Jesper
    Systemadmin.
     
    Jesper Stein, May 18, 2004
    #1
    1. Advertisements

  2. Jesper Stein

    Chriss3 Guest

    Hello Jesper,

    View the Security on the particular OU, ensure the delegation shows up and
    applies to child objects.
     
    Chriss3, May 18, 2004
    #2
    1. Advertisements

  3. Jesper Stein

    Jesper Stein Guest

    Some how, the users without the correct rigths, are old users, looks like
    they are from the NT4 days. All of them dont have "allow inherritable
    permissions...." on. But after the change to "Allow inherritable...." it
    seems to work. Thanks.

    Jesper
    Systemadmin.
    DK
     
    Jesper Stein, May 18, 2004
    #3
  4. Try to set inheritance on the objects. If it gets cleared again it means that
    you are being hit with the adminSDHolder functionality. You will need to review
    the groups the users are in and if none of them are admin type groups (Acc ops,
    Serv ops, print op, etc) tghen you need to go through and clear the admincount
    attribute.
     
    Joe Richards [MVP], May 18, 2004
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.