Inheritance from parent

[smathe3]

Hi, is there a way to report on all user objects that do not have Inheritance checked on the Security tab, under Advanced Security Settings?

[cmccullough]

Re: Inheritance from parent

I don't believe there's a way to get that specifically but you can select users then right-click and choose List Directory Security to see the security applied to those users.

[smathe3]

Re: Inheritance from parent

ok thanks - I am now trying to run this as a Query in ADSI, do you know what to search for?

[kstanush]

Re: Inheritance from parent

You can't run an AD query on any security settings as there isn't an attribute for that information. Security is kept in a special security descriptor. Technically, the data might be there in the ntsecuritydescriptor attribute, but its hard to read. Look at all of the directory attributes (Query Active Directory->View All Attributes) and you can see what I mean.

[smathe3]

Hello, I have version 10 of Hyena, is there an easier way to do this these days?

[cmccullough]

These functions are still the same, unfortunately.

[missioncritical]

What information are you trying to determine ? Is it the same as your original post/question ?

[missioncritical]

Hyena's Active Directory security listing shows inherited permissions with a bright yellow key icon, and inherited permissions with a dimmed version of the image. Ideally, we could/should have an "Inherited" column instead. If you know of some accounts where the inherited checkbox has been unchecked, see if the security listing shows a different colored image for some entries vs. an account with the inheritance enabled.