AD Users & Computers Permissions Issue

[Jeff Doty]

Hi All,

I have a strange little problem. My help desk has
delegated authority to deal with the user accounts in
several OUs, however there are a couple of accounts that
they don't have permissions. I have checked and on those
accounts the permissions are not being inherited from the
parent OU. I can check the box that says to inherit
permissions, but as soon as I close Users & Computers
those accounts revert to not inheriting the permissions.
Does anyone know what is going on? I need my Help Desk to
be able to unlock those accounts, disable them, reset the
passwords, etc. Thanks in Advance.

Jeff

 

[Steven L Umbach]

I notice that on accounts that belonged to higher level groups such as
administrators, backup operators, server operators, etc that inheritance has been
removed probably to keep delegation from applying to them. You may want to check to
see if those accounts are just in the users group level or not. --- Steve

 

[Jeff Doty]

You are correct. They are Domain Admin accounts. So I
take it that this is a feature! It would be handy to have
my Help Desk be able to reset the Domain Admins accounts
when they are in the field.

Jeff ;-|