Re: ACLs have changed

I would be highly surprised if a crash changed your ACLs there are simpler explanations for the changes.

How are the ACLs actually different? Does the ACL on the mobile user have inheritance disabled? If so is the mobile user in some enhanced builtin group or was it ever? If so, the issue is probably related to adminsdholder which you can google for and find a zillion responses to now.

I would not recommend just resetting permissions to default because it is possible that applications that install onto SBS change the perms and a reset to the Schema default for all objects could hurt you.


--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Fixxser wrote:
I am not sure if I have been compromised or wrong ACLs are because of system crashes (power failures).
SBS2003
I noticed a power user unable to change password for Mobile user. I then compared this AD with another like system and the ACLs are different on different users. I would like to make sure all ACLs are at default for the containers and users. How would I go about this? Another symptom was email to certain domains were blocked. I had to create another SMTP connector to get email working again. It might be related not sure.
.