Finding and changing AdminCount bit

[Guest]

We're having a horrible problem with the AdminCount bit being set to 1 and Inheritance being turned off on many of our users and groups in ADS 2003. I need to find a way to use Hyena to find all these, and, reset AdminCount to <NotSet> and turn on Inheritance. Don't see an easy way to do this, especially the Inheritance...

Any ideas?

Thanks in advance!

[kstanush]

Re: Finding and changing AdminCount bit

I'm not sure what the AdminCount is, but if its a numeric digit, you can try to view it using the Manage Directory Attributes function, which is available on any AD object. You would want to then try to modify it on one account and do whatever you do to verify that it worked. Then, you can do multiple accounts the same way.

I'm also not sure what you mean by having it say "not set", as if that is a value, then you would have to look at one that is set like that and see if it has a value. In AD, blank values are not allowed, so you can clear the value, which essentially removes the entire attribute.