Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Inheritance and Delegation Problem
Inheritance and Delegation Problem [message #161460] Mon, 28 September 2009 11:48 Go to next message
Alan  is currently offline Alan
Messages: 112
Registered: August 2009
Senior Member
I have begun delegating specific portions of my AD structure to service desk
for simple tasks such as password resets and account lockout maintenance. I
have come across a very annoying problem that I cannot figure out. In
several of the OU's objects are mysteriously losing their "inherit from
parent" check mark. I have created another OU and moved the objects to this
OU, and then applied the checkmark to each of the 8 users and then waited.
15-20 minutes later all objects have lost the check mark. I am not sure what
I am doing wrong and it is driving me crazy! Not to mention that I am backup
to support desk, so if they can't perform the necessary tasks I get stuck
with them. Anyone see this before, can anyone shed some light. Thanks.
Re: Inheritance and Delegation Problem [message #161462 is a reply to message #161460] Mon, 28 September 2009 12:16 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
The users are probably members of a protected group, such as account
operators. This occurs because of the adminSDHolder issue. Read the links
below and check each user it is failing on and you should see this is
expected behavior and the steps you need to take to fix the issue.

http://support.microsoft.com/?id=817433

http://www.msresource.net/knowledge_base/articles/info:_prot ected_groups_and_the_adminsdholder_object.html


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Alan" <Alan@discussions.microsoft.com> wrote in message
news:0E2EE2A1-46A9-4B45-9618-495D8295222E@microsoft.com...
>I have begun delegating specific portions of my AD structure to service
>desk
> for simple tasks such as password resets and account lockout maintenance.
> I
> have come across a very annoying problem that I cannot figure out. In
> several of the OU's objects are mysteriously losing their "inherit from
> parent" check mark. I have created another OU and moved the objects to
> this
> OU, and then applied the checkmark to each of the 8 users and then waited.
> 15-20 minutes later all objects have lost the check mark. I am not sure
> what
> I am doing wrong and it is driving me crazy! Not to mention that I am
> backup
> to support desk, so if they can't perform the necessary tasks I get stuck
> with them. Anyone see this before, can anyone shed some light. Thanks.
Re: Inheritance and Delegation Problem [message #161470 is a reply to message #161460] Mon, 28 September 2009 15:36 Go to previous messageGo to next message
Jorge Silva  is currently offline Jorge Silva  Portugal
Messages: 398
Registered: July 2009
Senior Member
Hi
Sounds AdminSDHolder issue, please refer to Paul suggested links.

--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.



"Alan" <Alan@discussions.microsoft.com> wrote in message
news:0E2EE2A1-46A9-4B45-9618-495D8295222E@microsoft.com...
> I have begun delegating specific portions of my AD structure to service
> desk
> for simple tasks such as password resets and account lockout maintenance.
> I
> have come across a very annoying problem that I cannot figure out. In
> several of the OU's objects are mysteriously losing their "inherit from
> parent" check mark. I have created another OU and moved the objects to
> this
> OU, and then applied the checkmark to each of the 8 users and then waited.
> 15-20 minutes later all objects have lost the check mark. I am not sure
> what
> I am doing wrong and it is driving me crazy! Not to mention that I am
> backup
> to support desk, so if they can't perform the necessary tasks I get stuck
> with them. Anyone see this before, can anyone shed some light. Thanks.
Re: Inheritance and Delegation Problem [message #161486 is a reply to message #161460] Tue, 29 September 2009 04:41 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Alan,

I agree with the others about the AdminSDHolder groups. If this isn't the
case please post again.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have begun delegating specific portions of my AD structure to
> service desk for simple tasks such as password resets and account
> lockout maintenance. I have come across a very annoying problem that
> I cannot figure out. In several of the OU's objects are mysteriously
> losing their "inherit from parent" check mark. I have created another
> OU and moved the objects to this OU, and then applied the checkmark to
> each of the 8 users and then waited. 15-20 minutes later all objects
> have lost the check mark. I am not sure what I am doing wrong and it
> is driving me crazy! Not to mention that I am backup to support desk,
> so if they can't perform the necessary tasks I get stuck with them.
> Anyone see this before, can anyone shed some light. Thanks.
>
Re: Inheritance and Delegation Problem [message #162080 is a reply to message #161460] Wed, 14 October 2009 14:35 Go to previous message
SubstituteThisWithMyF  is currently offline SubstituteThisWithMyF  Netherlands
Messages: 85
Registered: October 2009
Member
adminSDHolder...
http://blogs.dirteam.com/blogs/jorge/archive/2006/05/16/981. aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------ ------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------ ------------------------------
#################################################
#################################################
------------------------------------------------------------ ------------------------------

"Alan" <Alan@discussions.microsoft.com> wrote in message
news:0E2EE2A1-46A9-4B45-9618-495D8295222E@microsoft.com...
> I have begun delegating specific portions of my AD structure to service
> desk
> for simple tasks such as password resets and account lockout maintenance.
> I
> have come across a very annoying problem that I cannot figure out. In
> several of the OU's objects are mysteriously losing their "inherit from
> parent" check mark. I have created another OU and moved the objects to
> this
> OU, and then applied the checkmark to each of the 8 users and then waited.
> 15-20 minutes later all objects have lost the check mark. I am not sure
> what
> I am doing wrong and it is driving me crazy! Not to mention that I am
> backup
> to support desk, so if they can't perform the necessary tasks I get stuck
> with them. Anyone see this before, can anyone shed some light. Thanks.
>
> __________ Information from ESET Smart Security, version of virus
> signature database 4507 (20091014) __________
>
> The message was checked by ESET Smart Security.
>
> http://www.eset.com
>
>
>

__________ Information from ESET Smart Security, version of virus signature database 4507 (20091014) __________

The message was checked by ESET Smart Security.

http://www.eset.com
Previous Topic:What are the risks of virtualizing DC's ?
Next Topic:Windows 2008 Read Only AD deployment
Goto Forum:
  


Current Time: Thu Jan 18 20:43:48 MST 2018

Total time taken to generate the page: 0.05111 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software