Share via

Active Directory - What exactly does a group inherit from its parent group?

Daya 61 Reputation points
2022-04-19T11:47:21.447+00:00

I created a group called Group1. I went into its 'Security Tab' and tweaked the permissions a bit (eg. I gave 'Authenticated Users' Full Control).

Then I created Group2 and made it a member of Group1. I went into Group2's 'Security' tab and checked to see if those permissions had been inherited by Group2 - they had not.

So what exactly does Group2 inherit from Group1?

Both groups are global security groups, are in the same OU and have inheritance enabled.

Thank you :)

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,635 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,244 questions
0 comments
Accepted answer
  1. Gary Reynolds 9,406 Reputation points
    2022-04-19T12:04:16.91+00:00

    Hi @Daya

    As I mentioned in my answer to your other question, permissions that are assigned at the parent OU\Container level will be inherited, directly assigned permissions are not inherited by other objects in the same OU\container.

    It's probably worth having a read of these pages to get an understanding how AD permissions work.

    https://www.windows-active-directory.com/object-permissions-active-directory.html

    https://www.tenfold-security.com/en/active-directory-permissions-management/

    Gary.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest