google for it... ehhh of course I mean MSN search for it ;-) I already found: Every hour, the Microsoft Windows domain controller that has the primary domain controller (PDC) emulator operations master role verifies the ACLs on members of these administrative groups and compares them to the ACL on the AdminSDHolder object. If the ACL that is on the AdminSDHolder object is different, the ACLs on the members of the administrative group are reset to match the ACL on the AdminSDHolder object. For more info on the ADMINSDHOLDER object see the following related KB articles (not all may apply to your situation!) Description and Update of the Active Directory AdminSDHolder Object --> MS-KBQ232199 (http://support.microsoft.com/?id=232199) AdminSDHolder Thread Affects Transitive Members of Distribution Groups --> MS-KBQ318180 (http://support.microsoft.com/?id=318180) Delegated permissions are not available and inheritance is automatically disabled --> MS-KBQ817433 (http://support.microsoft.com/?id=817433) AdminSDHolder Object Affects Delegation of Control for Past Administrator Accounts --> MS-KBQ306398 (http://support.microsoft.com/?id=306398) Security tab of the adminSDHolder object does not display all properties --> MS-KBQ301188 (http://support.microsoft.com/?id=301188) "You do not have sufficient permissions in the Domain" error message occurs and Exchange Setup does not respond --> MS-KBQ319966 (http://support.microsoft.com/?id=319966) Certification Authority configuration to publish certificates in Active Directory of trusted domain --> MS-KBQ281271 (http://support.microsoft.com/?id=281271) cheers, Jorge
________________________________ From: [EMAIL PROTECTED] on behalf of Senthil Kumar Sent: Mon 2006-02-20 23:39 To: [email protected] Subject: [ActiveDir] admin SD holder Hi, Can anyone give me the details about admin SD holder.What it is ? What it do? K.Senthil This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
<<winmail.dat>>
