Hi all,

I have a customur who has just migrated to Exchange 2010, all accounts are in an AD OU, to solve a problem with active sync, it is necessary that for each account, the check box "Include inheritable permissions from this object's parent" is activated.
This checkbox is for each AD accounts in the Security tab, then choose the Advanced button, the box is at the bottom,

Is it possible to script this action in PS?

Thank you all for your help, and sorry for my poor english :-)

Laurent Berard

Hi,

Try this (Will run at ALL of your AD):


Get-QADUser -SizeLimit 0 | Set-QADObjectSecurity -LockInheritance ## For Un-Checked
Get-QADUser -SizeLimit 0 | Set-QADObjectSecurity -UnlockInheritance ## For Checked

For testing you can run this on one user:

Get-QADUser User1 | Set-QADObjectSecurity -LockInheritance ## For Un-Checked
Get-QADUser User1 | Set-QADObjectSecurity -UnlockInheritance ## For Checked



!!!PLEASE VERIFY AND TRY IT FIRST AT YOUR NONE PRODUCTION ENVIRONMENT!!!


good luck.

Thank you for your help,

It works fine !

best regards
Laurent BERARD