Setting default permissions in Active Directory

J

Jon Paskett

In our W2K Active directory, delegated permissions to the objects within an
OU are not inherited on user/group objects if they are moved from one OU to
another.

I am looking for a command line option that will set object permissions back
to default (inherited) values on a global scale such as the Advanced
Security Settings Tab's Default button does on an individual basis.

If there is such a tool out there that can assist me in this task I would be
really appreciate any advice you may share.

TIA

Jon
 
M

Matjaz Ladava [MVP]

acldiag to check security for delegation
dsacls to set AD security on objects.

--

Regards

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top