Unsolved How to restore AdminSDHolder permissions?

---

Admin accounts not able to change their own password, also noted that “Domain Admins” group had inheritance enabled (which is wrong).
Checking at the AdminSDHolder permissions there is no everyone group there and worst thing is that inheritance was enabled (that’s the reason why Domain Admins has inheriting enabled and unable to change their password).
How to restore the adminSDholder permissions?
NOTE: I tried to reset it with dsacls tool, but it's not the same thing.

@Andrei-Acuna-Arias,

I'm testing this on a Server 2016 machine:

1. open ADSI Edit
2. connect to your naming context
3. expand the container beneath default naming context
4. expand on CN=System
5. right click on CN=ADminSDHolder, select Properties.
6. Click on Security tab; click on Advanced Button
7. On Permissions tab, click on Restore Defaults.

This should do it for you.
If you have inheritance turned on you'll have issues.