Active Directory "Enable Inhertitance" for all users

[chrisjako]

Does anyone know how to powershell active directories option to Enable Inheritance for all users?

 

We require it in order to complete a SIMS auto consolidation process

Edited January 30, 2015 by chrisjako
spelling

[chrisjako]

* Inheritance

[Michael]

Do you mean Policy Inheritance? This should be enabled by default.

[chrisjako]

No security inheritance, I need to give a specific service account access to all my AD accounts, usually done via security tab on OU however the accounts themselves do not have inheritance enabled so it would mean me doing each one manually for almost 3000 accounts

[cscc]

Take a look here:

 

enable inheritance on all AD user accounts - [sOLVED] enterprise I.T.

 

Seems to be what you're after.

[halbaradkenafin]

Does anyone know how to powershell active directories option to Enable Inheritance for all users?

 

We require it in order to complete a SIMS auto consolidation process

 

Is this for the actual AD objects for the user or for their folders or for something else?

 

Should be easy enough to do using ACLs

[chrisjako]

Take a look here:

 

enable inheritance on all AD user accounts - [sOLVED] enterprise I.T.

 

Seems to be what you're after.

 

Did the trick thanks!

[Michael]

Correct if I'm wrong, if you do this per Security Group, then this should apply to all users within that group.

 

On 2008 R2, enable Advanced Features, right click the Security Group > Properties > Security > Advanced. Tick Include inheritable permissions...

 

Is this what you're after?