When you try and change a users settings you get “Active Directory Operation Failed on…” “You do not have the appropriate permissions to perform this operation…”
This happens because the user is a member of a Windows Builtin group, such as Domain Admins. When a user is a member of one of the special Windows built-in groups, Windows will automatically remove security inheritance on that user.To fix this you must reapply inheritance.
• Open Active Directory Users and Computers and locate the user object
• Right-click the user and select Properties
• Click the Security tab and then the Advanced button
• Check the Include inheritable permissions from this object’s parent check box
• Click OK twice. Now try again.
Be aware that Windows will automatically remove the inheritance setting again within a few minutes as long as the user remains a member of the Windows built-in group.
