Active Directory Security

[Ilan]

Hi,
After installing SP4 on the DC, I realized that for some
users the "allow Inheritable permission from parent..."
was cleared (unchecked).

Is any one experienced that?

More details: We have 3 DC's. and they all upgraded to SP4
within the same hour.(one by one)

Thanks,
Ilan

 

[Michael Sosnin]

There was a significant change to the way the AdminSDHolder object affects
delegation. In order to offer stronger security, SP4 behavior is similar
to what we saw in NT 4.0

The following article touches on this change. If you have additional
questions, I suggest you call in and have a grace support incident created.

327709 Windows 2000 Account Operators Can Manage Their Own Accounts
http://support.microsoft.com/?id=327709


(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.