AD Users- allow inheritable permissions
Posted on 2004-08-05
I'm trying to set "allow inheritable permissions from the parent to propagate to this object", for some user objects (at the moment they are in the Users container.)
The change seems to go through OK; I can go back in immediately and see the checkbox still ticked and the inherited permission displayed - but when I return to check it a couple of hours later the checkbox has been reset to being off, and the user object no longer has the permissions I want it to inherit.
Any ideas about ...
a) why these users might have the setting turned off in the first place ?
I'm not aware of having chosen to do this. The network was originally NT4 and was upgraded by introducing a new NT4 BDC, promoting to PDC and upgrading to 2003. The users that seem to be affected are the non-admin accounts of our domain administrators and share some group memberships
and b) how to get the setting to turn on and stay on ?