Shulou(Shulou.com)06/03 Report--

As the company group has many branch strongholds distributed in each region, each stronghold has its own independent domain, and now the development requires the network connection between each stronghold to adopt a unified domain. Therefore, each stronghold needs to migrate to the new domain in the old domain, and the new and old domains are parallel during the transition period. The account information and attributes between the two domains are synchronized from the old domain to the new domain through tools.

Management method: as the new domain is uniformly managed by the head office, there is no domain administrator authority assigned among the strongholds, only the corresponding OU management rights of their own strongholds (hereinafter referred to as OU administrators).

Phenomenon: in the new domain, it is found that some accounts (under their corresponding OU) whose attributes are gray "OU administrator" cannot be modified, but only the domain administrator can modify them. The investigation found that the account of "OU Administrator" under the account attribute "Security"-> "Advanced" did not inherit the parent permissions, and informed the domain administrator to inherit the "OU Administrator" account permissions from the parent. At this time, the properties can be modified, but after a period of time, the new and old domains are synchronized and turned gray again.

Solution: after a survey, it is found that the gray accounts belong to the domain administrator group in the old domain. When you go back to the old domain, remove the adminCount under the "Attribute Editor" tab of the account attribute in the new domain. As shown in the figure below, it needs to be cleared, but it is not possible to clear it here.

Open "ADSI Edit" on the account with domain administrator privileges on the new domain and navigate to the gray account, account attribute.

Clear this value

Then click "Security"-> "Advanced" next to it to inherit the patriarchal limit hook, and the problem is solved.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.