AdminSDHolder removal

Question

Hi all,

I have some users detected as AdminSDHolder, How can I remove them from this feature or permission?

Thank you.

Answer 1

Hi @Abdulrahman •

AdminSHolder is the delagation model used by SDProp process in order to protect AD accounts with high privilege.

When a user account is membre of one of privileged groups in active directory , it will automatically protected by applying the same permissions as AdminSHolder , set the value 1 in AdminCount attribut and disable inhereted permission

To disable it , you have to :

• Remove user account from priviled group
• Cleat the attibut Admincount
• Renable inhereted permissions

For more details you can read the following link :

Protected Accounts and Groups in Active Directory

***Please don't forget to mark helpful answer as accepted