Windows Vista Forums

Administrative users don't inherit Active Directory permissions?

  1. #1


    Neil Rashbrook Guest

    Administrative users don't inherit Active Directory permissions?

    Trying to set Active Directory permissions I noticed that the
    permissions on administrative users don't inherit from their container.
    Is this by design?

      My System SpecsSystem Spec

  2.   


  3. #2


    Robbin Meng [MSFT] Guest

    RE: Administrative users don't inherit Active Directory permissions?


    Hello Neil,

    Thanks for your post.

    Before we go further I would like to confirm what "Administrative users" you refer to? Are you trying to modify certain user/group object permission from ADUC console or
    ADSIEdit console? Please let us know the detailed situation and symptoms.

    There are several ways to apply permissions. Microsoft provides two tools: ADSI Edit (AdsiEdit.msc) and DSACLS (Dsacls.exe). Both tools are included on the Windows
    Server 2003 CD in Support\Tools. Several third-party products exist that can also be used to apply these rights.

    How to Apply Permissions
    http://technet.microsoft.com/en-us/l...EXCHG.65).aspx

    Hope this helps.


    Best regards,
    Robbin Meng(MSFT)
    Microsoft Online Newsgroup Support


      My System SpecsSystem Spec

  4. #3


    Neil Rashbrook Guest

    Re: Administrative users don't inherit Active Directory permissions?

    Sorry for forgetting to follow up on this post.

    Robbin Meng [MSFT] wrote:

    >Before we go further I would like to confirm what "Administrative users" you refer to?
    >
    I originally noticed this with users given the "Network Administrator"
    SBS role, but I see it also appears to apply to the (disabled)
    Administrator account, plus an administrative account I created for use
    with third-party software.

    >Are you trying to modify certain user/group object permission from ADUC console or ADSIEdit console?
    >
    >
    ADUC console. I was trying to give one account special permissions to
    the entire AD tree.

      My System SpecsSystem Spec


Administrative users don't inherit Active Directory permissions?
Similar Threads
Thread Forum
SBS users not in Active Directory SBS Server
Active Directory users Server General
Active Directory Users and Computers in 64 bit Vista Vista General
Script to add computer in Active Directory to all users in an OU VB Script
Active Directory: getting a list of users PowerShell