TopicActive Directory →
Simple definition
The process that regularly applies security clearances to protected objects.
Technical definition
Security Descriptor Propagator compares some of the preferred objects to the AdminSDHolder model and adjusts their ACLs.
What’s the point? ?
Prevent a drift of permissions on administrative accounts.
Concrete example
A manually modified ACL on a Domain Admin can be automatically re-applied.
Common problems
- ACL that seems to be coming back on its own
- adminCount uncleaned
- Heritage disabled
Related terms
To be noted: precise behaviors and commands may vary depending on the versions, products and architectures.