1. Click Start, Administrative Tools, and click the Active Directory Users And Computers console. Ensure that Advanced Features is enabled on the View menu.
2. In the console tree, right-click th particular Active Directory object which you want to set inheritance for, and click Properties from the shortcut menu.
3. When the Properties dialog box for the object opens, click the Security tab, and then click the Advanced button to open the Advanced Security Settings dialog box for the particular object.
4. The Allow Inheritable Permissions From The Parent To Propagate To This Object And All Child Objects. Include These With Entries Explicitly Defined Here checkbox should be enabled. Clearing the checkbox would prevent the object from inheriting permissions from its parent.
5. In the Permissions Entries box, choose the permission and click the Edit button.
6. When the Permission Entry dialog box for the object opens, you can set the following:
   • Set Apply Onto to the This Object Only option if you do not want any child objects to inherit this permission
   • Set Apply Onto to This Object And All Child Objects option if you want child objects to inherit this permission.
7. Enable the Apply These Permissions To Objects And/Or Containers Within This Container Only checkbox if you only want direct child objects of this object to inherit the particular permission.
8. Click OK, and click OK again in the object’s Advanced Security Settings dialog box, and in the Properties dialog box

• Pin It
• Share
• Tweet

Be Sociable, Share!

• 

Related posts:

1. How to transfer ownership of an Active Directory object
2. Little about Organizational Units
3. Implementing and Managing Group Policy Objects (GPOs) in Server 2003 Environment
4. How To Publish Resources in Active Directory
5. Creating and Managing Forests and Domains in Windows Server 2003 Environment