RE: [ActiveDir] some users do not have allow "inheritable permissions" set

[Steve Linehan]

Just out of curiosity when you go back an hour later is the box unchecked?  This really sounds like the work of AdminSDHolder and the users in question are likely members of protected groups.  If you have not looked at the following Knowledge Base article you may want to see if this is what you are running into: http://support.microsoft.com/default.aspx?scid=kb;en-us;817433.   Thanks,   -Steve From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ben D. Kusa Sent: Wednesday, November 09, 2005 7:17 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] some users do not have allow "inheritable permissions" set some users do not have allow "inheritable permissions" set. The only way I have found to reset that setting is to open each user and check that option off.   I have tried running dsacls OU=ou,DC=dc,DC=dc /I:T and it seems to go through ok but does not reset that option. Should that work? Or does anyone know any other way to set that option on multiple users   Thanks Ben