Users allow inheritable permissions check box

Windows 2003 native domain

Since moving to Exchange 2007, some users have a problem accessing Outlook
Web Access, an error page is shown indicating a security problem within AD.

These user accounts, when checked, have the 'Allow inheritable permissions'
check box unticked. This is found from properties of the user, security tab,
advanced, a check box for 'Allow inheritable permissions'.

Enabling inheritance resolves the problem but there doesn't seem to be any
pattern as to which users have this unchecked. So far, only 5 out of 1000
have been reported and I'd like to resolve the issue for all user accounts.

Initially, I would like to identify all user accounts which have the
inheritance check box unticked, how would we achieve this without opening
each user account manually ?

 

It can be done using a vbscript. I have an example here
http://www.winadmin.ro/2009/11/24/c...-inheritable-permissions-in-active-directory/
All the text is in Romanian but I hope I will have time to translate it in
English soon. Try the script in a test environment and correct any errors
that will appear during copy/paste.

Andrei
www.winadmins.net