Hello,

I've recently been troubleshooting a problem whereby permissions defined at a certain OU have not flowed down to all objects in sub OUs.

Looking into it further has uncovered that hardly any of my user accounts in AD are inheriting permissions. This is preventing the newly added permissions to not flow down to each object.

I have checked this behavior on a few other domains, my lab at home had 1 out of 4 accounts with inheritance disabled, on another domain I checked 4 accounts and 2 out of 4 had inheritance disabled. I know for a fact that none of these domains would have had someone manually turn off inheritance.

So my question is, does anyone have ideas as to what would be causing inheritance to be disabled on random user accounts?

Regards,

Peter

I should add as well, this is on Server 2012 R2.