Modifing "Inherit Permissions" on AD user accounts

[Mac Sobolewski]

All,

I've been experiencing a random problem in my AD that I
am hoping you can help me resolve. If I open a user
account propery page and select "Security" then go into
advanced, the "Inherit permissions" checkbox is unchecked
on random accounts. I have over 5,000 user accounts in
my AD and can't go and check them all, but if they are
not checked the Delegate Authority function does not work
and now my Service Desk keeps calling me to check this
box so that they can modify a user account. Is there a
script that I can run against my AD for all users that
will make sure this box is checked?

Thank you.

Mac

(e-mail address removed)

 

[Joe Richards [MVP]]

This check box gets unchecked if users are in the administrators groups or acc ops or serv ops.