SBS User Security Property Page, Changes disapear next day

Posted on 2007-10-17
Last Modified: 2010-03-17
When making changes to the User account, security property page, on a Microsoft Small Business Server 2003, the changes that are made are gone the next day. If I add a user account and assign "send as", or even if I change an existing account or group object, the changes are saved for a while, i.e. I can close it, open it immediately, and the changes are still there. But if I open it the next day all changes are gone. The user accounts are in the default OU.
Question by:palmtek
    LVL 82

    Accepted Solution

    This user is (or has been at one point) member of a "protected group" (Administrators, Account Operators, Server Operators, Print Operators, Backup Operators, Domain Admins, Schema Admins, Enterprise Admins, Cert Publishers); check here for details:
    The "Send As" right is removed from a user object after you configure the "Send As" right in the Active Directory Users and Computers snap-in in Exchange Server

    Delegated permissions are not available and inheritance is automatically disabled

    AdminSDHolder Thread Affects Transitive Members of Distribution Groups

    Security tab of the adminSDHolder object does not display all properties

    Author Comment

    The first tid you cited looks like the answer but there are no administrative groups in this account.
    The user belongs to these groups.
    Power Users
    Domain Users
    "domainname group"
    "domainname group" (distribution list group)
    Internet Users
    Mobile Users
    Remote Web Workplace Users
    LVL 82

    Expert Comment

    For one thing, it's enough if the user has been at some point a member of an administrative group; check the second article, there's an issue with resetting the inheritance flag.
    Then out of experience, it seems that the Power Users falls under the "protected groups" as well (but I can't find official documentation, only cases in which it helped to remove the user from the Power Users group); so try this if the inheritance issue doesn't apply.

    Author Comment

    oBdA, Have you ever tried removing inheritance from a user object before as a workaround to this problem or does not matter?
    LVL 82

    Expert Comment

    Well, inheritance is automatically removed from the protected accounts ...
    The issue above is that the inheritance isn't in all cases automatically turned on again after a user has been removed from all protected groups, so protecting an account that doesn't need it anymore. The second article has a script to correct that.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    The problems with reply email signatures

    Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

    Learn more about how the humble email signature can be used as more than just an electronic business card. When used correctly, a signature can easily be tailored for different purposes by different departments within an organization.
    Resolve Outlook connectivity issues after moving mailbox to new Exchange 2016 server
    In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
    The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now