RE: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Derek Harris
Did someone put that account into one of the protected groups? "Print operators" caused us a lot of grief a while ago. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of DannySent: Thursday, September 07, 2006 9:49 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] AD

RE: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Williams, Robert
Maybe AdminSDHolder is biting you? Heres an article that talks about the Send-As specifically, but its more than just that: http://support.microsoft.com/kb/907434/ If the user in question is a member of any of the following groups, then you could be seeing this: The following

Re: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Paul Williams
If the permissions are being reset it is the result of DSPROP. Google adminSDHolder or look at this: -- http://www.msresource.net/content/view/38/46/ The reason this is happening is because these users are members (directly or indirectly) of groups considered protected, e.g.

RE: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Laura A. Robinson
2006 12:36 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD object (User accounts) Permissions dissappearing Did someone put that account into one of the protected groups? "Print operators" caused us a lot of grief a while ago. From: [EMAIL PROTECTE

RE: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Brian Desmond
This user isnt a domain admin or enterprise admin is he/she? Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Danny Sent: Thursday, September 07, 2006 11:49 AM To: ActiveDir@mail.activedir.org Subject:

Re: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Danny
You are right! Thanks!On 9/7/06, Williams, Robert [EMAIL PROTECTED] wrote: Maybe AdminSDHolder is biting you? Here's an article that talks about the Send-As specifically, but it's more than just that: http://support.microsoft.com/kb/907434/ If the user in question is a

Re: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Danny
No, but the user is part of a group that is part of a group that has Admin-type permissions on an OU for their site.On 9/7/06, Brian Desmond [EMAIL PROTECTED] wrote: This user isn't a domain admin or enterprise admin is he/she? Thanks, Brian Desmond [EMAIL PROTECTED] c -

RE: [ActiveDir] AD object (User accounts) Permissions dissappearing

2006-09-07 Thread Derek Harris
: Thursday, September 07, 2006 11:19 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD object (User accounts) Permissions dissappearing Can you elaborate? What do you mean by "protected groups", and how did modifying the membership of the Print Operators group cause you grief