Had a number of users in my environment that had AdminCount=1 and Security Inheritance disabled, AdminCount was easy, enabling inheritance required a bit more work. This is so I don't forget how I did it. Seems to take a few minutes to replicate up where ADUC will see the changes.

Get-DisabledInheritanceUsers.ps1

## list of users, I wanted to control exactly what got modified.
## this command will get all the users we want to work with:
### Get-ADUser -Filter * -Properties nTSecurityDescriptor | `
### where { $_.nTSecurityDescriptor.AreAccessRulesProtected -eq $true } | `
### select Name,SamAccountName,DistinguishedName,nTSecurityDescriptor
$users = Import-Csv C:\scripts\users.csv
## allows inheritance
[bool]$isProtected = $false
## preserves inherited rules
[bool]$PreserveInheritance = $true

foreach ($u in $users)
{
    $user = [ADSI]"LDAP://$($u.distinguishedName)"
    $acl = $user.ObjectSecurity
    if ($acl.AreAccessRulesProtected)
    {
        $acl.SetAccessRuleProtection($isProtected,$PreserveInheritance)
        $user.CommitChanges()
    }
}