Windows Vista Forums

Administrative users don't inherit Active Directory permissions?

  1. #1


    Neil Rashbrook Guest

    Administrative users don't inherit Active Directory permissions?

    Trying to set Active Directory permissions I noticed that the
    permissions on administrative users don't inherit from their container.
    Is this by design?

      My System SpecsSystem Spec

  2. #2


    Robbin Meng [MSFT] Guest

    RE: Administrative users don't inherit Active Directory permissions?


    Hello Neil,

    Thanks for your post.

    Before we go further I would like to confirm what "Administrative users" you refer to? Are you trying to modify certain user/group object permission from ADUC console or
    ADSIEdit console? Please let us know the detailed situation and symptoms.

    There are several ways to apply permissions. Microsoft provides two tools: ADSI Edit (AdsiEdit.msc) and DSACLS (Dsacls.exe). Both tools are included on the Windows
    Server 2003 CD in Support\Tools. Several third-party products exist that can also be used to apply these rights.

    How to Apply Permissions
    http://technet.microsoft.com/en-us/l...EXCHG.65).aspx

    Hope this helps.


    Best regards,
    Robbin Meng(MSFT)
    Microsoft Online Newsgroup Support


      My System SpecsSystem Spec

  3. #3


    Neil Rashbrook Guest

    Re: Administrative users don't inherit Active Directory permissions?

    Sorry for forgetting to follow up on this post.

    Robbin Meng [MSFT] wrote:

    >Before we go further I would like to confirm what "Administrative users" you refer to?
    >
    I originally noticed this with users given the "Network Administrator"
    SBS role, but I see it also appears to apply to the (disabled)
    Administrator account, plus an administrative account I created for use
    with third-party software.

    >Are you trying to modify certain user/group object permission from ADUC console or ADSIEdit console?
    >
    >
    ADUC console. I was trying to give one account special permissions to
    the entire AD tree.

      My System SpecsSystem Spec

Administrative users don't inherit Active Directory permissions?

Similar Threads
Thread Forum
SBS users not in Active Directory
I've been asked to look at a SBS2003 system which has recently stopped its users from sending mail as another user. This is evidently because...
SBS Server
Active Directory users
How do I add users to Active Directory? There's 5 users in there now. One of them I added a while back is in there as well. I added 3 new users and...
Server General
Active Directory Users and Computers in 64 bit Vista
I have Vista 64 and I want to install AD Users and Computers like I did in 32 bit XP How can I do that?
Vista General
Script to add computer in Active Directory to all users in an OU
I have a group of students in an OU group that I wanted to give permission to logon to a new computer we have added. My hope was that there would...
VB Script
How to Verify Users are Disabled in Active Directory
I have a list of several users in an excel spreadsheet. Is it possible to retrieve the users in the excel spreadsheet and parse active directory to...
PowerShell
Active Directory: getting a list of users
I've not much experience with AD... I'm got PSCX 1.1.1, so was going to use the AD provider from it. (Unless the Quest AD cmdlets would make my...
PowerShell
Active Directory users and computers snap-in
Hello, anybody know hwo can I installed Active Directory Users and Computers Snap-in in Windows Vista? adminpak. form windows 2003 doesn't work....
Vista General