Q: How can I reset the default permissions on an Active Directory (AD) object?

Q: How can I reset the default permissions on an Active Directory (AD) object?

 

 

A: To reset the default permissions on an AD object, use the dsacls.exe command-line tool. Dsacls.exe can reset permissions on a single object, using the /S switch, or a tree, using the /S /T switch. To reset the permissions on an organizational unit (OU), use the following command:

Dsacls  /S /T