RE: Security permissions on specific account won't take

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Mark G (MarkG_at_discussions.microsoft.com)
Date: 01/10/05 

Date: Mon, 10 Jan 2005 06:59:04 -0800

Correction:
Only object that has Full Access is SYSTEM. Domain Admins/Ent Admins has
Special access. Included in Special Access permissions is ability to Modify
Permissions.
Only reason Ent Admins showed to have fukk control was after I changed to
inherit permissions from parent. When that reversed itself, above mentioned
permissions went back in to effect.

"Mark G" wrote:

> I have a particular account that I need to set permissions on, giving his
> asisstant full mailbox access so she can monitor his mailbox in her Outlook,
> and also be able to Send As him. Everytime I go in to AD, his account,
> security tab and add her, giving her full mailbox access, the setting
> disappears after a few minutes; as if I never applied or made the change. I
> have done this several times and it happens every single time. I AM able to
> successfully make same changes on other mailboxes without issue.
> One thing I noticed is the opton on his account to inherit permissions from
> parent is not checked. I enable this, and after a few minutes this setting
> disappears also. No error messages. I am logged in as domain admin when
> attempting to make change. Have noticed on his account that Domain Admins
> does not have full access, yet Ent Admins does. Domain admin account is also
> an Enterprise Admin. Assuming most restricting permissions is taking effect?
> Should I remove Domain Admins from the permissions list, leaving Enterprise
> Admins in there since it has Full Control? Then add Domain Admins back and
> give it full control?
> Account belongs to CEO so I am reluctant to go in and experiment with
> security settings. Curious if anyone has run into this before.

Quantcast