Were these accounts ever members of a protected group like Domain Admins? Check the admincount attribute and see if it is set to 1
On Fri, Jan 6, 2012 at 4:31 PM, David Lum <david....@nwea.org> wrote: > I have two users in AD and if I look at the security tab the permissions > are different. I want to make them the same – ideally have settings flow > down through OU’s, but I can’t set it at the OU since it’s not a user > object.**** > > ** ** > > It looks like inheritance or something got mucked on a few accounts, or > some weird delegation issue. The Service Desk team – they’re in a group I > delegated account creates, etc to – can edit everyone’s AD attributes but > their own. Looking at permissions in the AD tab their settings allow fewer > “write” attributes than a normal users.**** > > ** ** > > This has been going on some time, I am just now getting to looking into it. > **** > > *David Lum* > Systems Engineer // NWEATM > Office 503.548.5229 //* *Cell (voice/text) 503.267.9764**** > > ** ** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
