RE: [ActiveDir] Using an LDIF to set ACLs

2006-10-10 Thread Isenhour, Joseph
been pretty cool, and very much LDIFable. Alas From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, October 06, 2006 1:54 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Using an LDIF to set ACLs I think you could but it would be non-trivial, I

Re: [ActiveDir] Using an LDIF to set ACLs

2006-10-06 Thread Al Mulnick
There's no provision in the ldif standard that I'm aware of that would allow this. LDIFDE might have something with it, but I haven't seen it. You'd be better off using a different tool in my opinion. Al On 10/6/06, Isenhour, Joseph [EMAIL PROTECTED] wrote: Does anyone know if it's possible to

RE: [ActiveDir] Using an LDIF to set ACLs

2006-10-06 Thread joe
- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al MulnickSent: Friday, October 06, 2006 4:36 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Using an LDIF to set ACLs There's no

RE: [ActiveDir] Using an LDIF to set ACLs

2006-10-06 Thread Isenhour, Joseph
: Friday, October 06, 2006 1:54 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Using an LDIF to set ACLs I think you could but it would be non-trivial, I agree with Al, use a different tool. dsacls or scripting is the standard. Theoretically, and Dmitri or Eric can correct me if I

RE: [ActiveDir] Using an LDIF to set ACLs

2006-10-06 Thread Dmitri Gavrilov
much LDIFable. Alas From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, October 06, 2006 1:54 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Using an LDIF to set ACLs I think you could but it would be non-trivial, I agree with Al, use

Re: [ActiveDir] Using an LDIF to set ACLs

2006-10-06 Thread Joe Kaplan
@mail.activedir.org Sent: Friday, October 06, 2006 6:40 PM Subject: RE: [ActiveDir] Using an LDIF to set ACLs Yeah, Joe's correct, dsacls or scripting is your best bet. SDDL+encoding is also possible, but it would replace the whole SD value, which is rarely what you really want. Usually you just need