Random account lockouts

[Sofestibeest]

Please help. I cannot figure out this puzzle

Some accounts in ADS cannot be unlocked.
Accounts are in containers. We have a script to solve this to unlock the account.
However, on some accounts we see that the inheritance setting is set to off. (unchecked)
Everything is greyed out.
How can this be corrected so that accounts initially will work and no longer inheritance will be unchecked?

Thanks for your input.
r_m_berkenpas@hotmail.com

 

[Seaspray0]

To access the inherritance, you must use advanced view in active directory. Now, on the properties page you will have a security tab. Here you will find the inherritance button.

If this is happening again, and again, I suggest you impliment some kind of auditing on your active directory to see who is accessing these objects. The inherritance just doesn't turn off by itself on a normal working domain controller.