Active Directory security settings disappearing

[Joe \(thrillerIT\)]

Hello Everyone:

During these last couple of days, we have been
experiencing issues with certain security settings within
AD.

Issue:
I go to "Person A's" profile in the ADUC snap-in and
add "Person B" with certain permissions within "Person
A's" security tab. I wait about 40min - 2hrs and "Person
B" and the permission applied are gone. It seems as if
somehow the permissions are reverting during replication.

Troubleshooting steps taken:
1) We re-added the "Person B" with appropriate permissions
from 4 different domain controllers on 4 different
occasions. They were all reverted back to its original
state after 2 hours.
2) Modified "Person C's" profile and added "Person D" with
certain permissions within "Person C's" security tab.
After 2 hours the security permissions were STILL there.
It did not revert.

It seems that the issue FOR NOW is isolated to one
particular user. Unfortunately, recreating "Person A's"
account is NOT an option. Has anyone ever experienced this
type of behavior in AD? Any possible ideas or suggestions
to resolve this issue would be greatly appreciated?

Please Note: The security permission being added
to "Person B" under "Person A's" AD account are the SAVE
AS and RECIEVE AS for Exchange 2003.

Thanks in advance,

Joe (thrillerIT)

 

[Tim Hines [MSFT]]

Based on the description this sounds like it could be a result of
adminsdholder. The articles below will explain it and how to fix the
problem.

232199 Description and Update of the Active Directory AdminSDHolder Object
http://support.microsoft.com/?id=232199

318180 AdminSDHolder Thread Affects Transitive Members of Distribution
Groups http://support.microsoft.com/?id=318180


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.