Re: AD Users & Computers Permissions Issue

From: Jeff Doty (anonymous_at_discussions.microsoft.com)
Date: 04/10/04 

Date: Fri, 9 Apr 2004 15:55:39 -0700

You are correct. They are Domain Admin accounts. So I
take it that this is a feature! It would be handy to have
my Help Desk be able to reset the Domain Admins accounts
when they are in the field.

Jeff ;-|

>-----Original Message-----
>I notice that on accounts that belonged to higher level
groups such as
>administrators, backup operators, server operators, etc
that inheritance has been
>removed probably to keep delegation from applying to
them. You may want to check to
>see if those accounts are just in the users group level
or not. --- Steve
>
>
>"Jeff Doty" <anonymous@discussions.microsoft.com> wrote
in message
>news:1a90501c41e5f$e2091930$a401280a@phx.gbl...
>> Hi All,
>>
>> I have a strange little problem. My help desk has
>> delegated authority to deal with the user accounts in
>> several OUs, however there are a couple of accounts that
>> they don't have permissions. I have checked and on
those
>> accounts the permissions are not being inherited from
the
>> parent OU. I can check the box that says to inherit
>> permissions, but as soon as I close Users & Computers
>> those accounts revert to not inheriting the permissions.
>> Does anyone know what is going on? I need my Help Desk
to
>> be able to unlock those accounts, disable them, reset
the
>> passwords, etc. Thanks in Advance.
>>
>> Jeff :-)
>>
>
>
>.
>

Relevant Pages

  • Re: IS IT ME????
    ... the Halifax is run as about efficiently as the Child Support Agency ... manage the accounts on-line from now on. ... Calling it the Help Desk shows that at least they have a sense of ... It wouldn't surprise me if they had a "Customer Service" ...
    (uk.media.radio.archers)
  • Re: AD Users and Computers shortcut
    ... >I have a help desk person that needs access to user ... >accounts but I would really prefer not having her log into ... >the user manager so help desk personnel could access the ... Make a shortcut to dsa.msc. ...
    (microsoft.public.win2000.active_directory)
  • AD Users and Computers shortcut
    ... I have a help desk person that needs access to user ... accounts but I would really prefer not having her log into ... Can this be done in Win2K? ...
    (microsoft.public.win2000.active_directory)
  • AD Users & Computers Permissions Issue
    ... delegated authority to deal with the user accounts in ... however there are a couple of accounts that ... accounts the permissions are not being inherited from the ... I need my Help Desk to ...
    (microsoft.public.win2000.security)
  • Re: Changes to ACL disappear
    ... Implementing Method 2 did allow inheritance on all "protected groups" but it ... AdminCount attribute from 1 to 0 for administrative accounts (which the ... >> for adminSDHolder. ...
    (microsoft.public.windows.server.security)