been pretty cool, and very much LDIFable. Alas
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Friday, October 06, 2006
1:54 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Using an
LDIF to set ACLs
I think you could but it would be
non-trivial, I
There's no provision in the ldif standard that I'm aware of that would allow this. LDIFDE might have something with it, but I haven't seen it.
You'd be better off using a different tool in my opinion.
Al
On 10/6/06, Isenhour, Joseph [EMAIL PROTECTED] wrote:
Does anyone know if it's possible to
-
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al
MulnickSent: Friday, October 06, 2006 4:36 PMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Using an LDIF to
set ACLs
There's no
: Friday, October 06, 2006
1:54 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Using an
LDIF to set ACLs
I think you could but it would be
non-trivial, I agree with Al, use a different tool. dsacls or scripting is the
standard.
Theoretically, and Dmitri or Eric can
correct me if I
much LDIFable.
Alas
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of joe
Sent: Friday, October 06, 2006 1:54 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Using an LDIF to set ACLs
I think you could but it would be non-trivial, I agree with Al, use
@mail.activedir.org
Sent: Friday, October 06, 2006 6:40 PM
Subject: RE: [ActiveDir] Using an LDIF to set ACLs
Yeah, Joe's correct, dsacls or scripting is your best bet. SDDL+encoding is
also possible, but it would replace the whole SD value, which is rarely what
you really want. Usually you just need