AD Users & Computers Permissions Issue

From: Jeff Doty (anonymous_at_discussions.microsoft.com)
Date: 04/09/04 

Date: Fri, 9 Apr 2004 11:24:23 -0700

Hi All,

I have a strange little problem. My help desk has
delegated authority to deal with the user accounts in
several OUs, however there are a couple of accounts that
they don't have permissions. I have checked and on those
accounts the permissions are not being inherited from the
parent OU. I can check the box that says to inherit
permissions, but as soon as I close Users & Computers
those accounts revert to not inheriting the permissions.
Does anyone know what is going on? I need my Help Desk to
be able to unlock those accounts, disable them, reset the
passwords, etc. Thanks in Advance.

Jeff :-)

Relevant Pages

  • Re: folders lost after creating restricted user acct. How to find?
    ... The files in your Administrator account are still there, but a Limited user account cannot see them, due to NTFS file permissions. ... Log on with the Administrator account and if needed, give access permissions to the other user accounts you created. ... Disable Simplified Sharing and Password-Protect a Shared Folder in Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Security Group Keeps getting removed???
    ... ACL on all security principals (users, groups, and machine accounts) present ... Delegated permissions are not available and inheritance is automatically ... AdminSDHolder Object Affects Delegation of Control for Past Administrator ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegating AD Rights (Enable/Disable Accounts)
    ... I will definitely pass it on to my Customer ... user accounts in AD to non-admin staff so that they will be able to ... permissions as Domain User rights will work just fine. ... The UMRA ...
    (microsoft.public.windows.server.scripting)
  • Re: Delegation - Password Reset - Access Denied
    ... If you go to properties of an AD object, select the security tab and click ... on advanced you should be on the permissions tab. ... WARNING - Any implicit permissions defined will be lost and reset back to ... Accounts in the OU and found that the BldgAdmins group was not listed. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win2k - Account Operator not working properly
    ... The tool is a command line tool from Microsoft to enumerate the permissions on an object. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Helpdesk CAN create new accounts/modify/delete/reset passwords for NEW accounts in OUs beneath the top-level OU. ...
    (microsoft.public.windows.server.active_directory)