M
Mihhail Sergejev
Hi,
I have a Windows 2000 native mode domain with Windows
2000/2003 DCs.
Has noticed that I can not change permission for user
account (in AD User&Computers right-click account,
properties, Security-tab) if this account in the past was
member of Domain Admins global group.
Though I can make any changes (I need to delegate Full
Control for Account Operators), some time later
permissions are reset back and check-box "Allow
inheritable permissions from parent to propagate to this
object" (Security-tab of user account properties) is
cleared.
For user account that never was member of Domain Admins
group I can successfully change permissions.
Please, help...
Thank,
Mihhail
I have a Windows 2000 native mode domain with Windows
2000/2003 DCs.
Has noticed that I can not change permission for user
account (in AD User&Computers right-click account,
properties, Security-tab) if this account in the past was
member of Domain Admins global group.
Though I can make any changes (I need to delegate Full
Control for Account Operators), some time later
permissions are reset back and check-box "Allow
inheritable permissions from parent to propagate to this
object" (Security-tab of user account properties) is
cleared.
For user account that never was member of Domain Admins
group I can successfully change permissions.
Please, help...
Thank,
Mihhail