ldp.exe security descriptor DACL Protected meaning

David Zemdegs 1,586 Reputation points


I have an OU that displays the message 'Cannot edit permissions because they have been written in a nonstandard format...'. This is a problem as all the buttons are greyed out.

I accessed the security descriptor of that OU in ldp.exe and I noticed that in the SD control section there is a tick in the box marked 'DACL_Protected'. What does this mean?

btw - I was able to add an ACE using ldp.exe and once I did that, the 'cannot edit permissions' disappeared and I was able to use ADAC to edit permissions!


David Z

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,987 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. David Zemdegs 1,586 Reputation points

    Found the answer - DACL Protected means the inheritance has been disabled.

    0 comments No comments