Has anyone used DSACLS to reset permissions on objects in Active Directory. I've got a really annoying problem where user objects are not inheriting the permissions from above resulting in the staff not being allowed to reset passwords.
I am sure I sat down and went through them all and ticked the box during half term but the permission seems to have been reset.