Re: Need Help regarding "send AS"

On 27 Sep 2006 12:34:32 -0700, henrikcj@xxxxxxxxx wrote:

Please Help, i realydon't know what to do.


You restarted the IS and it still doesnt work?
Are the permissions not sticking becuase the account has the
adminsdholder object tied to it?

http://support.microsoft.com/default.aspx/kb/232199/
Description and Update of the Active Directory AdminSDHolder Object
.

Relevant Pages

  • Re: Permissions resetting in Blocked Inheritance OUs
    ... If the ACL that is on the AdminSDHolder object is ... Delegated permissions are not available and inheritance is automatically ... "You do not have sufficient permissions in the Domain" error message occurs ... This user account is in an OU that has Blocked ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD User Objects & Permission Inheritance
    ... I went ahead and granted the Account Operators built in group rights on the ... adminSDholder object according to what I want the OU admins to have. ... > later all user objects began to inherit permissions again. ...
    (microsoft.public.win2000.active_directory)
  • Re: Setting permissions in User Security tab is reverting back to previoussetting
    ... The permissions are changing because of the AdminSDHolder object. ... they will always revert back because these are protected groups. ... At the time I had a blackberry and my account was in one of these groups. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Operators accessing other account operators
    ... account from the account operators group as that is a protected group by AD ... attribute to NOT SET and enable permissions inheritance on the objects. ... If the ACL that is on the AdminSDHolder object is ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Admins missing in GAL - AdminSDHolder?
    ... This was down to the AdminSDHolder object stripping out permissions and unticking the "Allow inheritable permissions" button. ... my problem now is that members of Domain Admins appear missing in the GAL to eveyone except other Domain Admins. ... Those users should have "normal" account with mailbox etc for daily tasks and account with domain admin privileges to perform administrative tasks. ...
    (microsoft.public.windows.server.active_directory)