Administrative users don't inherit Active Directory permissions?

N

Neil Rashbrook

Trying to set Active Directory permissions I noticed that the
permissions on administrative users don't inherit from their container.
Is this by design?
 

My Computer

R

Robbin Meng [MSFT]

Hello Neil,

Thanks for your post.

Before we go further I would like to confirm what "Administrative users" you refer to? Are you trying to modify certain user/group object permission from ADUC console or
ADSIEdit console? Please let us know the detailed situation and symptoms.

There are several ways to apply permissions. Microsoft provides two tools: ADSI Edit (AdsiEdit.msc) and DSACLS (Dsacls.exe). Both tools are included on the Windows
Server 2003 CD in Support\Tools. Several third-party products exist that can also be used to apply these rights.

How to Apply Permissions
http://technet.microsoft.com/en-us/library/bb123844(EXCHG.65).aspx

Hope this helps.


Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support
 

My Computer

N

Neil Rashbrook

Sorry for forgetting to follow up on this post.

Robbin Meng [MSFT] wrote:

>Before we go further I would like to confirm what "Administrative users" you refer to?
>
I originally noticed this with users given the "Network Administrator"
SBS role, but I see it also appears to apply to the (disabled)
Administrator account, plus an administrative account I created for use
with third-party software.

>Are you trying to modify certain user/group object permission from ADUC console or ADSIEdit console?
>
>
ADUC console. I was trying to give one account special permissions to
the entire AD tree.
 

My Computer

Top