Solved

Unable to inherit permissons from the parent!!

Posted on 2008-10-29
8
587 Views
Last Modified: 2012-05-05
Hello, I am having an issue where a users account (child object) is not inheriting permissions from its parent

Basically iI clicked on the security tab of a user's account properties in active directory...clicked on Advanced..and then checked the box for "Allow inheritable permissions from the parent to propogate...............etc"

But the box keeps getting unchecked and removing the inheritable permissions (I am sure there is a policy reason or something for it but no idea where to look, and no one over here has any idea either)

Windows 2003 environment

Attached a screenshot, thanks
permissions.JPG
0
Comment
Question by:dealstrike
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
8 Comments
 
LVL 7

Expert Comment

by:manu4u
ID: 22831707
Click on Owner tab and change the OWNERSHIP ..

Then retry the Permission ... .
0
 

Author Comment

by:dealstrike
ID: 22831771
Who should I change the ownership to?
 
right now in the current owner of this item: (a user)  who is a domain admin
In the list for "change owner to"
My account (I am a domain admin)
and Administrators (domain/administration)
The user's account is not in the list
0
 

Author Comment

by:dealstrike
ID: 22831823
I checked some other accounts...and it seems the current owner is a different member of our IT group here, it varies from user to user
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 
LVL 7

Expert Comment

by:manu4u
ID: 22831856
I think, you can move this account to another OU  if you dont want this user inheriting any permission from parent.
0
 

Author Comment

by:dealstrike
ID: 22831897
I need it to inherit permissions from its parents because it assigns the proper security groups, but the inherited permissions keep getting removed
0
 

Author Comment

by:dealstrike
ID: 22831938
also...fyi..the owner is usually the IT person that created the account i think
0
 

Accepted Solution

by:
dealstrike earned 0 total points
ID: 22833444
Anyone?
0
 
LVL 7

Expert Comment

by:manu4u
ID: 22840685
Now, I guess it is a Microsoft Bug issue ,you need a hotfix ..

Just try the following document

http://support.microsoft.com/default.aspx?scid=kb;en-us;817433 
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
powershell mailbox move question 8 50
RMS / DRM - differences? 3 53
Change local account password via GPO? 34 72
Chocolatey with PowerShell is not working again 2 41
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question