: The security descriptor propagation task could not calculate a new security descriptor for the following object.

hi

i getting alert resource account shared mailbox , in disable mode.

when open acl editor on resource account, , got advance , single permission, uncheck , recheck 1 of rights recalculate the size of ace's correctly allowing sd propagator work. 

but error message :

###################

---------------------------
windows security
---------------------------
unable save permission changes on serviceaccountest.a constraint violation occurred.


---------------------------
ok   
---------------------------

####################

alert: active directory cannot create new security descriptor
source: dc2k8
path: dc2k8.contoso.com
last modified by: connector framework alert write action last modified time: 5/10/2015 1:50:07 alert description: security descriptor propagation task not calculate new security descriptor following object.

object:
cn=serviceaccountest,ou=resource accounts,dc=contoso,dc=com

operation tried again later.

user action

if condition continues, attempt view status of object , manually change security descriptor.


additional data

error value:
1340 inherited access control list (acl) or access control entry (ace) not built.

@@@@@@@@@@@@@@@@@@

any appreciated.

how can increase size of security descriptor ......

hi,

have gone through below link,

https://support.microsoft.com/en-in/kb/2001769?wa=wsignin1.0

Windows Server  >  Directory Services