To enable or disable default permissions for Active Directory objects:

1. Identify the relevant security groups.
2. Open the Active Directory Users and Computers snap-in.
3. Right-click the object from which you want to enable or disable default permissions.
4. Select Properties.
5. Go to the Security tab.
6. Set permissions for the security group.
7. Click the Advanced button.
8. Select the appropriate check box to enable or disable inheritance.
9. Click OK twice.