Re: AD User & Inherited Permissions

Well the long and short of it is that your DA account won't get the
inherited permissions.

There is a process which updates the security descriptor on any account
which is in one of the builtin admin groups every hour or so with a default
security descriptor.

What is the scenario that you have that requires these delegations remain?

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"Jim" <jim@xxxxxxxxxxxxxxxxxxx> wrote in message
news:478e13b6$0$97734$39cecf19@xxxxxxxxxxxxxxxxxxxxx
I have a Domain Admin User object that is behaving strangely. It is located
in the root of the domain object. When I go into the security tab and then
select the advanced button, I notice the the inherited permission check box
is not selected. So I selected it and clicked Apply and OK. A Couple hours
latter the box is unchecked. I then manually checked the box on all of our
DC's within about 2 minutes time. Within an hour or two the box was
unchecked again. I need this Domain Admin to receive the Inherited
permissions. Where do I go from here?

Jim



.