Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

security inheritance for user objects within active directory

Posted on 2008-11-03
1
Medium Priority
?
551 Views
Last Modified: 2012-05-05
I am currently got an unusual problem as I have created a security group to reset passwords for a help desk group. I have found however that certain accounts cant have there passwords reset and this is due to the fact that the users account security setting doesnt have inheritance on. This is strange as I have created a lot of them and why this has switched off puzzles me. Also now that I have identified that this is the case how can I automate a task to go round all the accounts and switch inheritance on?
0
Comment
Question by:daytripper-2k
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 10

Accepted Solution

by:
fm250 earned 1500 total points
ID: 22868923
On the secrurity tab of the account go to advanced and then uncheck allow inhertance .... and select copy and remove the ones you need.
Also this might help:
http://seclists.org/basics/2006/Feb/0385.html
0

Featured Post

How Blockchain Is Impacting Every Industry

Blockchain expert Alex Tapscott talks to Acronis VP Frank Jablonski about this revolutionary technology and how it's making inroads into other industries and facets of everyday life.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question