Re: Permission for user account in AD

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 06/10/04 

Date: Thu, 10 Jun 2004 15:21:01 +0200

This is the behavior when a user is member of one or more protected groups

http://support.microsoft.com/default.aspx?scid=kb;en-us;232199 

-- 
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Mihhail Sergejev" <nejit@nej.ee> skrev i meddelandet
news:1ad7001c44ed6$bf49f700$a001280a@phx.gbl...
> Hi,
>
> I have a Windows 2000 native mode domain with Windows
> 2000/2003 DCs.
> Has noticed that I can not change permission for user
> account (in AD User&Computers right-click account,
> properties, Security-tab) if this account in the past was
> member of Domain Admins global group.
> Though I can make any changes (I need to delegate Full
> Control for Account Operators), some time later
> permissions are reset back and check-box "Allow
> inheritable permissions from parent to propagate to this
> object" (Security-tab of user account properties) is
> cleared.
>
> For user account that never was member of Domain Admins
> group I can successfully change permissions.
>
> Please, help...
>
> Thank,
> Mihhail

Relevant Pages

  • Re: "Edit Users..." Menu Item Disabled in Telephony Management Sna
    ... To make it clear i used account that is member of domain admins and group ... I set up also the account (already member of domain admins and trough this ... Running "tapicfg show" revealed that I had no Active Directory TAPI ...
    (microsoft.public.win32.programmer.tapi)
  • Re: Access denied to event viewer?
    ... > logged on as the built in administrator account for the domain but not as ... > a domain user that is a member of the domain admins group. ... >> to them or logged in remotely via remote desktop. ...
    (microsoft.public.windows.server.security)
  • Re: domain permission problems
    ... i get permission denied unless i add the domain1 account to the local admins group of ALL servers in domain2. ... "Jorge Silva" wrote in message ... domain2 as member of Domain Admins group. ... You can make that group member of local administrators in the other domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Permission for user account in AD
    ... Nice info Chriss3 ... >> Has noticed that I can not change permission for user ... >> account (in AD User&Computers right-click account, ... >> For user account that never was member of Domain Admins ...
    (microsoft.public.win2000.active_directory)
  • account locked out multiple times per day
    ... I'm having a bizarre problem with an account that gets locked out ... multiple times per day. ... admins and made it a member of domain users. ... However, it seems like if I'm not a member of domain admins, my ...
    (microsoft.public.windows.server.sbs)
Quantcast