Great article!  I’ve been meaning to write this one myself. 

AdminSDHolder is a built-in protection mechanism to make sure specific objects…like Domain Admin accounts don’t have the security on their object inadvertently changed.  So, you’re a domain admin and go an make a change to an OU’s security and think that an object is going to inherit it?  Not so!  Read on…

http://www.frickelsoft.net/blog/?p=247

For more information contact us at www.webactivedirectory.com, or call us at (+1) 800-747-3565