Setting Special User Permissions

[Guest]

I have set some permissions at the top of our Active Directory tree, I can
see them flowing down to all the sub-ordinate OU's, however, the rights are
not being assigned to the user accounts within the OU's. Upon investigation,
the users are not receiving the permissions because the "Inherit from parent
the permission entries that apply to child objects" has not been selected. We
have around 700 accounts like this that I need to change. Is there a way of
globally selecting this rather than manually doing each user account.

 

[Barry]

I have set some permissions at the top of our Active Directory tree, I can
see them flowing down to all the sub-ordinate OU's, however, the rights
are
not being assigned to the user accounts within the OU's. Upon
investigation,
the users are not receiving the permissions because the "Inherit from
parent
the permission entries that apply to child objects" has not been selected.
We
have around 700 accounts like this that I need to change. Is there a way
of
globally selecting this rather than manually doing each user account.

I thik you can use admodify for this

 

[kj]

DSACLS should enable you to set the inheritance, but I'm not clear on what
this has to do with permissions from group assignments.