Active Directory Security



After installing SP4 on the DC, I realized that for some
users the "allow Inheritable permission from parent..."
was cleared (unchecked).

Is any one experienced that?

More details: We have 3 DC's. and they all upgraded to SP4
within the same hour.(one by one)




Michael Sosnin

There was a significant change to the way the AdminSDHolder object affects
delegation. In order to offer stronger security, SP4 behavior is similar
to what we saw in NT 4.0

The following article touches on this change. If you have additional
questions, I suggest you call in and have a grace support incident created.

327709 Windows 2000 Account Operators Can Manage Their Own Accounts

(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question