RE: [ActiveDir] Security Tab on User Object - Allow inheritable Permissions

[Gil Kirkpatrick]

Title: Message

Hey John,

 

That checkbox is a representation of the inheriteance flags that are associated with each access control entry (ACE), i.e with each specific permission granted or denied in the ACL.

 

There are five flags in the mask that define how each ACE is inherited:

 

0x01 OBJECT_INHERIT_ACE indicates that the ACE should be inherited by all non-container child objects, and should propagate through (but not apply to) any container child obejcts

0x02 CONTAINER_INHERIT_ACE indicates that the ACE should be inherited by all container child objects and propagate through to subsequent child objects

0x04 NO_PROPAGATE_INHERIT_ACE causes an inherited ACE to not be propagated any further down the hierarchy

0x08 INHERIT_ONLY_ACE indicates that the ACE does not apply to the (container) object it is attached to, but will be inherited by child objects

0x10 INHERITED_ACE indicates the ACE was inherited from a parent container

 

You can set these values in a script using the IADsAccessControlEntry::put_Flags method.

 

-gil

 

 

-----Original Message-----
From: John F. Hann [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 03, 2003 2:07 PM
To: ActiveDir List
Subject: [ActiveDir] Security Tab on User Object - Allow inheritable Permissions

On the Security Tab at the bottom is a check box: All inheritable Permissions from parent to propagate to this object.

 

Is this an ACL or property?  I have some user objects that do not have this checked and I have to delegate authority

 

 

So....How can I set this with a script?

 

John Hann

BancorpSouth

662.678.7179