Active Directory Permissions
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Active Directory Permissions

 
Post new topic   Reply to topic    Windows Server Forum Index -> Active Directory
Author Message
mbrunton
Guest
Posted: Fri Nov 04, 2005 5:50 pm    Post subject: Active Directory Permissions Reply with quote
When you go to the security tab of a user, click on advance

What does the "Default box" do?

I don't quite understand this "to replace all permission entries with the
default settings"
Back to top
Joe Richards [MVP]
Guest
Posted: Fri Nov 04, 2005 5:50 pm    Post subject: Re: Active Directory Permissions Reply with quote
It replaces the explicit permissions on the object with the permissions defined
in the defaultsecuritydescriptor attribute of the object class from the schema.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


mbrunton wrote:
Quote:
When you go to the security tab of a user, click on advance

What does the "Default box" do?

I don't quite understand this "to replace all permission entries with the
default settings"
Back to top
mbrunton
Guest
Posted: Fri Nov 04, 2005 5:50 pm    Post subject: Re: Active Directory Permissions Reply with quote
Do you know of script that can do this on users?




"Joe Richards [MVP]" wrote:

Quote:
It replaces the explicit permissions on the object with the permissions defined
in the defaultsecuritydescriptor attribute of the object class from the schema.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


mbrunton wrote:
When you go to the security tab of a user, click on advance

What does the "Default box" do?

I don't quite understand this "to replace all permission entries with the
default settings"
Back to top
Ulf B. Simon-Weidner [MVP
Guest
Posted: Fri Nov 04, 2005 5:50 pm    Post subject: Re: Active Directory Permissions Reply with quote
=?Utf-8?B?bWJydW50b24=?= says...
Quote:
Do you know of script that can do this on users?


The commandline-tool dsacls is able to do this.

--
Gruesse - Sincerely,

Ulf B. Simon-Weidner

MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
Website: http://www.windowsserverfaq.org
Back to top
mbrunton
Guest
Posted: Fri Nov 04, 2005 9:50 pm    Post subject: Re: Active Directory Permissions Reply with quote
That works, but it doesn't check the inherit from parent the permission... box.

Can dsacls check this box?



"Ulf B. Simon-Weidner [MVP]" wrote:

Quote:
=?Utf-8?B?bWJydW50b24=?= says...
I tried that. But what switch do I need to use?


/S for a single object, /S /T for the subtree of objects.

--
Gruesse - Sincerely,

Ulf B. Simon-Weidner

MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
Website: http://www.windowsserverfaq.org
Back to top
Ulf B. Simon-Weidner [MVP
Guest
Posted: Fri Nov 04, 2005 9:50 pm    Post subject: Re: Active Directory Permissions Reply with quote
=?Utf-8?B?bWJydW50b24=?= says...
Quote:
That works, but it doesn't check the inherit from parent the permission... box.

Can dsacls check this box?


Hello,

I haven't seen this option, however there's a script in
http://support.microsoft.com/?id=817433

which is setting the inherit flag on adminsdholder-objects. You could modify
that script to accomblish what you want to do.

--
Gruesse - Sincerely,

Ulf B. Simon-Weidner

MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
Website: http://www.windowsserverfaq.org
Back to top
Ulf B. Simon-Weidner [MVP
Guest
Posted: Fri Nov 04, 2005 9:50 pm    Post subject: Re: Active Directory Permissions Reply with quote
=?Utf-8?B?bWJydW50b24=?= says...
Quote:
I tried that. But what switch do I need to use?


/S for a single object, /S /T for the subtree of objects.

--
Gruesse - Sincerely,

Ulf B. Simon-Weidner

MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
Website: http://www.windowsserverfaq.org
Back to top
mbrunton
Guest
Posted: Fri Nov 04, 2005 9:50 pm    Post subject: Re: Active Directory Permissions Reply with quote
I tried that. But what switch do I need to use?

"Ulf B. Simon-Weidner [MVP]" wrote:

Quote:
=?Utf-8?B?bWJydW50b24=?= says...
Do you know of script that can do this on users?


The commandline-tool dsacls is able to do this.

--
Gruesse - Sincerely,

Ulf B. Simon-Weidner

MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
Website: http://www.windowsserverfaq.org
Back to top
Paul Williams [MVP]
Guest
Posted: Sun Nov 13, 2005 1:50 pm    Post subject: Re: Active Directory Permissions Reply with quote
I can't remember if the version of DSACLS that ships with Windows can do
this, but I believe the version that ships with R2 ADAM does.

http://technet2.microsoft.com/WindowsServer/f/?en/Library/0bff23b9-6c4e-46d8-9e6e-e9d7d1e46fce1033.mspx

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Active Directory All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB