Cannot change special permisssion in either of our domains

techQ7A · 07-14-2006, 04:57 PM

We've hit a strange problem. The special permissions ACL is greyed out
on all levels in both of our domains. I would assume this means it's
propogated from a parent object, but there is no higher level AD tree
that our top level domain could be getting this permission from. I'm
wondering if it has anything to do with a recent patch from microsoft..
Has anyone else experienced this problem recently?

CH

brady · 07-14-2006, 05:02 PM

Does the parent level have greyed out ACLs?

Can you unclick the propagate to child from the parent?

techQ7A · 07-14-2006, 05:59 PM

Yes. At every level the special permissions are greyed out. Domain Admins have a grey checked mark, and everyone has a grey blank for special permissions. I know there's an exchange security patch that took away the special send as permissions recently, but I'm not sure if that is related to this issue.

CH

techQ7A · 07-14-2006, 09:39 PM

Additionally, if I remove the 'allow permissions to inherit from parent folder' check box, the special permissions box is still greyed out.

Ch

brady · 07-14-2006, 09:43 PM

Well, unless the propagating permissions are extremely high up in the tree, lets assume it's the patch.

techQ7A · 07-14-2006, 09:46 PM

Yeah, that is what I'm thinking. It's hard to believe microsoft would just outright disable special permissions, but it does seem to be a recent occurence. And there's only two of us who make AD changes, so it wasn't configured on our side.. I guess I'll have to take it up with them.
Thanks,

CH

07-14-2006, 04:57 PM	#1 (permalink)
techQ7A Newb Techie Join Date: Mar 2006 Posts: 9	Cannot change special permisssion in either of our domains We've hit a strange problem. The special permissions ACL is greyed out on all levels in both of our domains. I would assume this means it's propogated from a parent object, but there is no higher level AD tree that our top level domain could be getting this permission from. I'm wondering if it has anything to do with a recent patch from microsoft.. Has anyone else experienced this problem recently? CH

07-14-2006, 05:02 PM	#2 (permalink)
brady Wizard Techie Join Date: Feb 2005 Posts: 3,665	Does the parent level have greyed out ACLs? Can you unclick the propagate to child from the parent? __________________

07-14-2006, 09:43 PM	#5 (permalink)
brady Wizard Techie Join Date: Feb 2005 Posts: 3,665	Well, unless the propagating permissions are extremely high up in the tree, lets assume it's the patch. __________________

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

07-14-2006, 05:59 PM	#3 (permalink)
techQ7A Newb Techie Join Date: Mar 2006 Posts: 9	Yes. At every level the special permissions are greyed out. Domain Admins have a grey checked mark, and everyone has a grey blank for special permissions. I know there's an exchange security patch that took away the special send as permissions recently, but I'm not sure if that is related to this issue. CH

07-14-2006, 09:39 PM	#4 (permalink)
techQ7A Newb Techie Join Date: Mar 2006 Posts: 9	Additionally, if I remove the 'allow permissions to inherit from parent folder' check box, the special permissions box is still greyed out. Ch

07-14-2006, 09:46 PM	#6 (permalink)
techQ7A Newb Techie Join Date: Mar 2006 Posts: 9	Yeah, that is what I'm thinking. It's hard to believe microsoft would just outright disable special permissions, but it does seem to be a recent occurence. And there's only two of us who make AD changes, so it wasn't configured on our side.. I guess I'll have to take it up with them. Thanks, CH