As a matter of fact, yes they were. I think early on messing with these guys is 
where I learned about AdminSDHolder. Looks like I get to use ADSIEDIT right?

From: KenM [mailto:[email protected]]
Sent: Friday, January 06, 2012 1:49 PM
To: NT System Admin Issues
Subject: Re: Not even sure how to look this one up

Were these accounts ever members of a protected group like Domain Admins?

Check the admincount attribute and see if it is set to 1


On Fri, Jan 6, 2012 at 4:31 PM, David Lum 
<[email protected]<mailto:[email protected]>> wrote:
I have two users in AD and if I look at the security tab the permissions are 
different. I want to make them the same - ideally have settings flow down 
through OU's, but I can't set it at the OU since it's not a user object.

It looks like inheritance or something got mucked on a few accounts, or some 
weird delegation issue. The Service Desk team - they're in a group I delegated 
account creates, etc to - can edit everyone's AD attributes but their own. 
Looking at permissions in the AD tab their settings allow fewer "write" 
attributes than a normal users.

This has been going on some time, I am just now getting to looking into it.
David Lum
Systems Engineer // NWEATM
Office 503.548.5229<tel:503.548.5229> // Cell (voice/text) 
503.267.9764<tel:503.267.9764>


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
[email protected]<mailto:[email protected]>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to