Keep losing inheritable permissions

[royboy42]

Hi,
I have an interesting problem where I have created a security group in AD to enable our helpdesk to change and reset user passwords. I have applied the relevant access and progated the permissions down to the user objects. When I check the user objects they all the write permissions and there is a tick placed in Allow Inheritable Permissions.
Half an hour later the security group has disappeared and the allow inheritable permissions tick has disappeared.
Could someone kindly advise me what could be causing this problem.

Thank You in Advance.

Roy Ferreira
MCSA in 2000

 

[vbrocks]

Make your changes by connecting to your root dc first through the ad users and computers mmc, see if that helps.

 

[royboy42]

Found out what the problem was. The problem was the fact I had Domain Users (which is a default built in security group), a member of Print Operators (another built in security group), along with the security group (which I was trying to set the permissions on the parent folder and propogate down to all user objects), was also part of two built in groups. When AD runs a thread every hour to check the access control lists (ACLs) on the the built in groups, It resets the permissions on all groups that are a member within a member of a built in security group. Hence therfore why I kept losing permission inheritance. If I have confused you have a read of these three articles.

http://support.microsoft.com/?id=318180

http://support.microsoft.com/?id=817433

http://support.microsoft.com/?id=327825

Thanks Vbrock for your reply.

Regards

Roy