Cannot change special permisssion in either of our domains

[techQ7A]

We've hit a strange problem. The special permissions ACL is greyed out
on all levels in both of our domains. I would assume this means it's
propogated from a parent object, but there is no higher level AD tree
that our top level domain could be getting this permission from. I'm
wondering if it has anything to do with a recent patch from microsoft..
Has anyone else experienced this problem recently?

CH

 

[brady]

Does the parent level have greyed out ACLs?

Can you unclick the propagate to child from the parent?

 

[techQ7A]

Yes. At every level the special permissions are greyed out. Domain Admins have a grey checked mark, and everyone has a grey blank for special permissions. I know there's an exchange security patch that took away the special send as permissions recently, but I'm not sure if that is related to this issue.

CH

 

[techQ7A]

Additionally, if I remove the 'allow permissions to inherit from parent folder' check box, the special permissions box is still greyed out.

Ch

 

[brady]

Well, unless the propagating permissions are extremely high up in the tree, lets assume it's the patch.

 

[techQ7A]

Yeah, that is what I'm thinking. It's hard to believe microsoft would just outright disable special permissions, but it does seem to be a recent occurence. And there's only two of us who make AD changes, so it wasn't configured on our side.. I guess I'll have to take it up with them.
Thanks,

CH