Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

AD Security Inheritance Reversing (AdminSDHolder?)

$
0
0

Hi All,

I've run into an issue where I'm delegating rights to an OU and it is not consistently applying to some user objects.  I enable inheritance on the user objects and it reverses after an hour (probably AdminSDHolder protection).  The users arenot members of a protected group.  I have other users who are members of the exact same groups and inheritance does not reverse on them.  The only difference is that the accounts it is reversing on have been ADMT'd.  I verified that they are not members of protected groups in the remote domain.  Is there some additional security that causes user objects which have been ADMT'd to be protected?  If so is there a way around this without editing the AdminSDHolder object since that reduces security?

Thanks!

-Casey


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>