@mail.activedir.org
Subject: RE: [ActiveDir] some users do not have allow "inheritable permissions"
set
Thanks for the info. It looks like the users were once part of a protected
group, I reset the inheritance flag and it holds on the users after that
process that runs
D] [mailto:[EMAIL PROTECTED] On
Behalf Of Steve Linehan
Sent: Thursday, November 10, 2005
1:19 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] some
users do not have allow "inheritable permissions" set
Just out of curiosity when you go back an hour later is the
box unchecked?
ct, rather than the leaf object. Hopefully I
understood correctly...
-DaveC
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve
LinehanSent: Thursday, November 10, 2005 1:19 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] some users do
not
Every hour, the domain controller that has the primary domain controller (PDC)
emulator operations master role verifies the ACLs on members of the protected
groups and compares them to the ACL on the AdminSDHolder object. If the ACL
that is on the AdminSDHolder object is different, the ACLs on t
Just out of curiosity when you go back an hour later is the
box unchecked? This really sounds like the work of AdminSDHolder and the
users in question are likely members of protected groups. If you have not
looked at the following Knowledge Base article you may want to see if
this is what
