I create a linked clone pool pointed to reside in an AD OU. The security of the OU is set to full control for domain admins. The desktops are created by view composer. The security rights on the newly created objects for the desktops have full control for domain admins and a few hours later the full control for the objects goes away. As a result, composer can neither delete nor recompose these objects because the ability to delete them is no longer available and compser shows an "access denied" error in the logs.
VMware View 4.6
VMware vSpehere 4.1U1i
Active Directory 2003 Forest and Domain level (2 2008 DC's and 2 2003 DC's)
Any ideas? HAs anyone seen this behavior?