Solved

How to make a permission setting on all accounts under an OU

Posted on 2013-05-31
4
181 Views
Last Modified: 2013-11-13
I have a 2003 AD domain. We have all of our 6000 user accounts under 1 OU.

I need to enable "write personal information" on the "self" account under security tab fr all the users under the OU.

Is there a way to to this.

Also, I will also need to have any new account inherit this setting when added to the OU.

any thoughts
0
Comment
Question by:rdefino
  • 2
  • 2
4 Comments
 
LVL 22

Accepted Solution

by:
Joseph Moody earned 500 total points
ID: 39210929
There is. See this article:

http://deployhappiness.com/find-out-what-computer-a-user-logged-into/

It shows how to do it for the managedby attribute.
0
 

Author Comment

by:rdefino
ID: 39211070
So I read through that and I'm not seeing how that will help me. That talking about computers accounts.

I'm dealing with users accounts.
0
 
LVL 22

Expert Comment

by:Joseph Moody
ID: 39211096
It is the same concept. You'll right click on your Users OU and select Properties - Security - Advanced.

Add SELF as the principal. Then select descendant user objects. Browse down to the write personal information box. Check Allow. Then OK several times.
0
 

Author Comment

by:rdefino
ID: 39216149
So I followed this and there is no "write personal Informartion" in the list under descendant user objects.
0

Featured Post

Backup Solution for AWS

Read about how CloudBerry Backup fully integrates your backups with Amazon S3 and Amazon Glacier to provide military-grade encryption and dramatically cut storage costs on any platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question