Security Rights to an Object Disappear

[tlandry]

I have a server setup for students to use. I create a
User and then click on properties and make the User a
member of the Account Users Group. I next open the User's
security tab. It shows that Account Operator has Full
Control right to the User. This is fine as I want
students to be able to make some changes to the User
object.
However, within about 15- 30 minutes from creating the
User, the Account Operator just disappears from the
Security Tab. The student is then unable to make changes
to the user account.
Please help. Anybody have any idea whay causes this?
Terry Landry

 

[Joe Richards [MVP]]

Anyone that is in the special admin groups such as administrators and account operators and others get special
permissions put on them via the adminsdholder functionality. This is documented in MSKB, simply search for
adminsdholder.

The idea behind it is that you don't want account ops to be able to modify other account ops user id's nor be able to
modify admins either.