How to make a permission setting on all accounts under an OU

I have a 2003 AD domain. We have all of our 6000 user accounts under 1 OU.

I need to enable "write personal information" on the "self" account under security tab fr all the users under the OU.

Is there a way to to this.

Also, I will also need to have any new account inherit this setting when added to the OU.

any thoughts
Who is Participating?
Joseph MoodyConnect With a Mentor Blogger and wearer of all hats.Commented:
There is. See this article:

It shows how to do it for the managedby attribute.
rdefinoAuthor Commented:
So I read through that and I'm not seeing how that will help me. That talking about computers accounts.

I'm dealing with users accounts.
Joseph MoodyBlogger and wearer of all hats.Commented:
It is the same concept. You'll right click on your Users OU and select Properties - Security - Advanced.

Add SELF as the principal. Then select descendant user objects. Browse down to the write personal information box. Check Allow. Then OK several times.
rdefinoAuthor Commented:
So I followed this and there is no "write personal Informartion" in the list under descendant user objects.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.