Hey Ulf - I see you got home from the summit safely
;-)
In your AD newsgroup post which your referenced below
you answered the following question
>> Is there a comprehensive reference that
identifies each permission required
>> to perform a task ? Giving a user the "AddUser" permission is not enough.
>> They also have to have the rights to add objects and child objects, etc
>> etc...
with
> Not that I'm aware off - the rights I don't know I set with the delegation
>> to perform a task ? Giving a user the "AddUser" permission is not enough.
>> They also have to have the rights to add objects and child objects, etc
>> etc...
with
> Not that I'm aware off - the rights I don't know I set with the delegation
> wizard and
run dsacls or look into the security tab.
Just
want to make sure that everyone is aware of the excellent Delegation Whitepaper,
that's been available for a couple of months now:
And
don't forget to download the Appendix for this whitepaper, which contains all
the nitty gritty details on what's required to perform which
task.
/Guido
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-Weidner
Sent: Donnerstag, 8. April 2004 17:10
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] using dsacls.exe
Hello Bart,
see the following post:
Ulf B. Simon-Weidner
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vermeire Bart
Sent: Dienstag, 6. April 2004 06:43
To: [EMAIL PROTECTED]
Subject: [ActiveDir] using dsacls.exe
Hi,
I am struggling
with the dsacls.exe tool and hope that someone in this list can answer
me.
I need to set
permissions on an OU from a CMD line batch file and I am using dsacls.exe for
that.
However, setting
the "Reset Password" extended right is one task I cannot
accomplish.
Can you please
help me out here.
regards,
Bart
Vermeire
Volvo
IT
