Object permissions disappear

[Albert Stravinski]

Hi,

I've this issue where users or groups who're given
permissions to an other object disappear after a while
(within 5-30 minutes).

To be specific, we discoverred this while giving a user
send as pemissions to an other users account.
After a while the user disappeared as an entry on the
other user object's security tab.
The problem suppossed to occure after applying the latest
Exchange post SP3 rollup. Before there where no issues.
We also tested this with setting other permissions, but
the same thing happens, so now I more think like this is
an AD issue.
We've checked replication topology, FSMO's, DNS, GC
placement, etc.
There are 4 DC's all within one subnet. All DC's are
running W2K SP4.

Any ideas???

 

[Matjaz Ladava [MVP]]

If those accounts are part of any Admin group or similar, then you are
seeing AdminSDHolder process on work. See
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q318180 for detailed
explanation.

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

 

[Guest]

Hmmm, that's a nice one.

This basically means you can't use any custom permissions
(including 'send as') on any object which is a member of
any of the standard administrative groups.

Thanks, anyway, saves me a lot of trouble further
investing the problem.