Solved

Unable to inherit permissons from the parent!!

Posted on 2008-10-29
8
584 Views
Last Modified: 2012-05-05
Hello, I am having an issue where a users account (child object) is not inheriting permissions from its parent

Basically iI clicked on the security tab of a user's account properties in active directory...clicked on Advanced..and then checked the box for "Allow inheritable permissions from the parent to propogate...............etc"

But the box keeps getting unchecked and removing the inheritable permissions (I am sure there is a policy reason or something for it but no idea where to look, and no one over here has any idea either)

Windows 2003 environment

Attached a screenshot, thanks
permissions.JPG
0
Comment
Question by:dealstrike
  • 5
  • 3
8 Comments
 
LVL 7

Expert Comment

by:manu4u
ID: 22831707
Click on Owner tab and change the OWNERSHIP ..

Then retry the Permission ... .
0
 

Author Comment

by:dealstrike
ID: 22831771
Who should I change the ownership to?
 
right now in the current owner of this item: (a user)  who is a domain admin
In the list for "change owner to"
My account (I am a domain admin)
and Administrators (domain/administration)
The user's account is not in the list
0
 

Author Comment

by:dealstrike
ID: 22831823
I checked some other accounts...and it seems the current owner is a different member of our IT group here, it varies from user to user
0
 
LVL 7

Expert Comment

by:manu4u
ID: 22831856
I think, you can move this account to another OU  if you dont want this user inheriting any permission from parent.
0
 

Author Comment

by:dealstrike
ID: 22831897
I need it to inherit permissions from its parents because it assigns the proper security groups, but the inherited permissions keep getting removed
0
 

Author Comment

by:dealstrike
ID: 22831938
also...fyi..the owner is usually the IT person that created the account i think
0
 

Accepted Solution

by:
dealstrike earned 0 total points
ID: 22833444
Anyone?
0
 
LVL 7

Expert Comment

by:manu4u
ID: 22840685
Now, I guess it is a Microsoft Bug issue ,you need a hotfix ..

Just try the following document

http://support.microsoft.com/default.aspx?scid=kb;en-us;817433
0

Join & Write a Comment

[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now