Nope - I was reading it in the bar but not responding since
I didn't like to dig up my reply in the thread in google on the phone and didn't
want to retype the answer ;-)
I was sorry too that Guido wasn't able to spend more time
there.
Talking about UG guess there's some stuff to be discussed
(offline).
And finally talking about DR - I've got there some ideas
I'll hopefully be able to test soon. Keep me in the loop for that one. And I'm
also a fan of DR-Sites - I'm currently implementing two of them with DCs of
every domain, but I've also got another idea which I need to
develop/verify.
ulf
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Samstag, 10. April 2004 09:00
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] using dsacls.exe
Actually I think he replied to this one in the bar of the
Renaissance as him, myself, and Dean were chatting about it while drinking
and Ulf was working on his pda/phone.
BTW Guido, you slipped out like a phantom man. Sorry you
had other responsibilities to deal with. Would have been nice to have had you
around longer and especially when sitting with the Dev guys. We had a lot of
fun.
Also BTW, the Dev guys said that Universal groups were
all a huge mistake and no one should be using them... Do Exchange in a separate
single domain forest.... j/k.... But I think they would have said that had we
discussed it. I had something else on my mind when we chatted with them that was
more important to me than Universal Groups and Domain Local Groups.
Another also BTW, Dean and I talked out an interesting
idea, you may like it when we have the result ready. An idea to hopefully kill
the entire lag site paradigm by making it unnecessary. Never was a fan of that
idea but I do like the idea of DR sites for grabbing backups off of as I have
discussed previously.
joe
-------------
http://www.joeware.net (download joeware)
http://www.cafeshops.com/joewarenet (wear joeware)
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido
Sent: Friday, April 09, 2004 1:29 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] using dsacls.exe
Hey Ulf - I see you got home from the summit safely
;-)
In your AD newsgroup post which your referenced below
you answered the following question
>> Is there a comprehensive reference that
identifies each permission required
>> to perform a task ? Giving a user the "AddUser" permission is not enough.
>> They also have to have the rights to add objects and child objects, etc
>> etc...
with
> Not that I'm aware off - the rights I don't know I set with the delegation
>> to perform a task ? Giving a user the "AddUser" permission is not enough.
>> They also have to have the rights to add objects and child objects, etc
>> etc...
with
> Not that I'm aware off - the rights I don't know I set with the delegation
> wizard and
run dsacls or look into the security tab.
Just
want to make sure that everyone is aware of the excellent Delegation Whitepaper,
that's been available for a couple of months now:
And
don't forget to download the Appendix for this whitepaper, which contains all
the nitty gritty details on what's required to perform which
task.
/Guido
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-Weidner
Sent: Donnerstag, 8. April 2004 17:10
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] using dsacls.exe
Hello Bart,
see the following post:
Ulf B. Simon-Weidner
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vermeire Bart
Sent: Dienstag, 6. April 2004 06:43
To: [EMAIL PROTECTED]
Subject: [ActiveDir] using dsacls.exe
Hi,
I am struggling
with the dsacls.exe tool and hope that someone in this list can answer
me.
I need to set
permissions on an OU from a CMD line batch file and I am using dsacls.exe for
that.
However, setting
the "Reset Password" extended right is one task I cannot
accomplish.
Can you please
help me out here.
regards,
Bart
Vermeire
Volvo
IT
