RE: [ActiveDir] Not inheritting permissions

[Grillenmeier, Guido]

looks like you've manually added a permission at the OU level and didn't supply the scope for it => on your OU go to Properties -> Security -> Advanced, find your permission and then choose to apply the permission to "this objects and all child objects".  This won't be required for permissions that you apply for a specific object-type, as this always inherits down the tree (if you don't limit that specific ACE)   /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brenda Casey Sent: Donnerstag, 11. August 2005 18:20 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Not inheritting permissions In my 2000 AD I have some of my OU's set to "Inherit from parent the permission entries that apply to child objects.  Include these with entries explicitly denied here"  however, the OU's below them are not really inheriting the permissions (even though the check mark shows they are).  In addition, all of the user accounts below these OU's are set to Inherit permissions also, and are not really inheriting the permissions.  Anyone have any thoughts on this, other than manually changing the permissions on every user account manually?   Thanks, Brenda   Brenda Casey Network Manager Billings Public Schools [EMAIL PROTECTED] 406-247-3792