A process that at regular intervals (default 60 mins) propagates the AdminSDHolder Security Descriptor (SD) to Objects belonging to protected groups.
If the adminCount attribute of a user is set to 0 or is not specified then the user is not protected by SDProp. If the attribute is 1 then the user is however protected.Active Directory Users and Computers (ADUC)