ldp.exe security descriptor DACL Protected meaning

Question

Greetings,

I have an OU that displays the message 'Cannot edit permissions because they have been written in a nonstandard format...'. This is a problem as all the buttons are greyed out.

I accessed the security descriptor of that OU in ldp.exe and I noticed that in the SD control section there is a tick in the box marked 'DACL_Protected'. What does this mean?

btw - I was able to add an ACE using ldp.exe and once I did that, the 'cannot edit permissions' disappeared and I was able to use ADAC to edit permissions!

Thanks

David Z

Answer 1

Found the answer - DACL Protected means the inheritance has been disabled.