Solved

How to make a permission setting on all accounts under an OU

Posted on 2013-05-31
4
178 Views
Last Modified: 2013-11-13
I have a 2003 AD domain. We have all of our 6000 user accounts under 1 OU.

I need to enable "write personal information" on the "self" account under security tab fr all the users under the OU.

Is there a way to to this.

Also, I will also need to have any new account inherit this setting when added to the OU.

any thoughts
0
Comment
Question by:rdefino
  • 2
  • 2
4 Comments
 
LVL 22

Accepted Solution

by:
Joseph Moody earned 500 total points
ID: 39210929
There is. See this article:

http://deployhappiness.com/find-out-what-computer-a-user-logged-into/

It shows how to do it for the managedby attribute.
0
 

Author Comment

by:rdefino
ID: 39211070
So I read through that and I'm not seeing how that will help me. That talking about computers accounts.

I'm dealing with users accounts.
0
 
LVL 22

Expert Comment

by:Joseph Moody
ID: 39211096
It is the same concept. You'll right click on your Users OU and select Properties - Security - Advanced.

Add SELF as the principal. Then select descendant user objects. Browse down to the write personal information box. Check Allow. Then OK several times.
0
 

Author Comment

by:rdefino
ID: 39216149
So I followed this and there is no "write personal Informartion" in the list under descendant user objects.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

816 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now