Avatar of fruitloopy
fruitloopy asked on

Active Directory Users and Computers

I have created a group (IT_Admin) to allow them to have the same rights as a domain admin in AD without adding the users to the domain admin group but the permissions are not being inherited.

Using the AD delegate control process (or just adding the IT_Admin group to the security permissions) at the top level domain isnt pushing the permissions down.
I have checked and all the OUs beneath this have the "Include inheritable permissions from this objects parent" ticked.

On checking a child OUs permissions the new group is listed but none of the permission boxes are checked.

I cannot see a way to force the permissions through the child OUs and objects
Active DirectoryWindows Server 2003Microsoft Server OS

Avatar of undefined
Last Comment
Aard Vark

8/22/2022 - Mon
Ganesamoorthy S

Check "this object and all child object" is selected on the advance OU security permission, then only the permission will apply to child objects
ASKER CERTIFIED SOLUTION
McKnife

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Sarang Tinguria

Just make that IT_Admin member of Domain Admins group
Do not try to manipulate the permissions on the OU structure you may end up breaking something else
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy