When looking on my OU go to Properties -> Security -> Advanced, find your permission there is already check mark in front of : Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly denied here" but listed under the permission entries under "inherited from" it says "not inherited." Thanks, Brenda Brenda Casey Network Manager Billings Public Schools [EMAIL PROTECTED] 406-247-3792
________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: Thursday, August 11, 2005 9:32 AM To: [email protected] Subject: RE: [ActiveDir] Not inheritting permissions looks like you've manually added a permission at the OU level and didn't supply the scope for it => on your OU go to Properties -> Security -> Advanced, find your permission and then choose to apply the permission to "this objects and all child objects". This won't be required for permissions that you apply for a specific object-type, as this always inherits down the tree (if you don't limit that specific ACE) /Guido ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brenda Casey Sent: Donnerstag, 11. August 2005 18:20 To: [email protected] Subject: [ActiveDir] Not inheritting permissions In my 2000 AD I have some of my OU's set to "Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly denied here" however, the OU's below them are not really inheriting the permissions (even though the check mark shows they are). In addition, all of the user accounts below these OU's are set to Inherit permissions also, and are not really inheriting the permissions. Anyone have any thoughts on this, other than manually changing the permissions on every user account manually? Thanks, Brenda Brenda Casey Network Manager Billings Public Schools [EMAIL PROTECTED] 406-247-3792 List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
