Great article! I’ve been meaning to write this one myself.
AdminSDHolder is a built-in protection mechanism to make sure specific objects…like Domain Admin accounts don’t have the security on their object inadvertently changed. So, you’re a domain admin and go an make a change to an OU’s security and think that an object is going to inherit it? Not so! Read on…
http://www.frickelsoft.net/blog/?p=247
For more information contact us at www.webactivedirectory.com, or call us at (+1) 800-747-3565