• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 204
  • Last Modified:

How to make a permission setting on all accounts under an OU

I have a 2003 AD domain. We have all of our 6000 user accounts under 1 OU.

I need to enable "write personal information" on the "self" account under security tab fr all the users under the OU.

Is there a way to to this.

Also, I will also need to have any new account inherit this setting when added to the OU.

any thoughts
0
rdefino
Asked:
rdefino
  • 2
  • 2
1 Solution
 
Joseph MoodyBlogger and wearer of all hats.Commented:
There is. See this article:

http://deployhappiness.com/find-out-what-computer-a-user-logged-into/

It shows how to do it for the managedby attribute.
0
 
rdefinoAuthor Commented:
So I read through that and I'm not seeing how that will help me. That talking about computers accounts.

I'm dealing with users accounts.
0
 
Joseph MoodyBlogger and wearer of all hats.Commented:
It is the same concept. You'll right click on your Users OU and select Properties - Security - Advanced.

Add SELF as the principal. Then select descendant user objects. Browse down to the write personal information box. Check Allow. Then OK several times.
0
 
rdefinoAuthor Commented:
So I followed this and there is no "write personal Informartion" in the list under descendant user objects.
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now