Hi,

I have an OU called X in this OU i created another OU (Y). This OU (Y) containts users accounts. I changed the security settings on these user accounts in the second OU (Y).
The problem is that every hour the security of these user accounts in OU (Y) resets to something "basic" ! which p.e. doesn't even allow a user to change his password.
The user accounts in OU(X) are not affected.
I already checked for scheduled tasks, ... but can't find anything.

Suggestions are welcome

Thx,
Andy

Re: Security on User objects in active directory by Joe

Joe
Thu Jun 10 09:25:44 CDT 2004

These IDs are or at one time were enhanced native IDs, probably account op or
server op or print op or backup op or possibly one of the admin group IDs. This
functionality is by design, search the web for the term adminSDHolder.

This is in place to protect you from accidently inherited delegations.

http://support.microsoft.com/default.aspx?kbid=232199



--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net



Andy wrote:
> Hi,
>
> I have an OU called X in this OU i created another OU (Y). This OU (Y) containts users accounts. I changed the security settings on these user accounts in the second OU (Y).
> The problem is that every hour the security of these user accounts in OU (Y) resets to something "basic" ! which p.e. doesn't even allow a user to change his password.
> The user accounts in OU(X) are not affected.
> I already checked for scheduled tasks, ... but can't find anything.
>
> Suggestions are welcome
>
> Thx,
> Andy

Re: Security on User objects in active directory by Andy

Andy
Fri Jun 11 07:50:01 CDT 2004

Thx Joe,
your reply was very useful !!
Gr.
Andy


"Joe Richards [MVP]" wrote:

> These IDs are or at one time were enhanced native IDs, probably account op or
> server op or print op or backup op or possibly one of the admin group IDs. This
> functionality is by design, search the web for the term adminSDHolder.
>
> This is in place to protect you from accidently inherited delegations.
>
> http://support.microsoft.com/default.aspx?kbid=232199
>
>
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
>
> Andy wrote:
> > Hi,
> >
> > I have an OU called X in this OU i created another OU (Y). This OU (Y) containts users accounts. I changed the security settings on these user accounts in the second OU (Y).
> > The problem is that every hour the security of these user accounts in OU (Y) resets to something "basic" ! which p.e. doesn't even allow a user to change his password.
> > The user accounts in OU(X) are not affected.
> > I already checked for scheduled tasks, ... but can't find anything.
> >
> > Suggestions are welcome
> >
> > Thx,
> > Andy
>