Home / server / Questions / 460087
Accepted
Nixphoe
Asked: 2012-12-22 10:06:10 +0800 CST

Managing Advanced Security Settings Active Directory User Accounts

  • 772

I have a requirement to change some settings in the security tab of user accounts in Active Directory for a large group of people. I need to give Everyone Access to specific Read Settings under the Security tab of a user account.

Is there a better way to manage this than having to go into Active Directory > View > Advanced Features > Open User Account > Security Tab; then adding the check marks for each of the Permissions for Everyone to each of the users? This also needs to be applied to new user accounts moving forwards.

Edit:

The specific permissions are the advanced permissions, not just read. I need to add Authenticated Users to be able to: Read account restrictions, Read general information, Read logon information, read group information, read phone and mail options, read private information.

I tried to setup a new OU. But I don't have those advanced security settings under the new OU.

windows-server-2008

1 Answers

  1. Best Answer

    You should be able to use Delegation of Control to delegate the required READ permission(s) to the Everyone group on User objects. If you set it at the domain root it should be inherited by all child nodes in the domain, avoiding the need to manually set the permissions on existing objects or new objects..

    • 1