Dear Kevin,
Thanks a bunch for the help! It is deeply appreciated! I am already
pumped about this group already! However, I have another question;
I created the custom mmc as you explained below on a domain controller
in our test domain. I called the mmc "students." It worked fine on the
domain controller but then when I moved it to another workstation in the
domain and tried to run it I received the following error:
Snap-in failed to initialize.
Name: <unknown>
CLSID: {then a very long number}
I logged on as the appropriate user who was delegated control of the OU,
etc... I am just a little puzzled why it worked on the DC and not on the
workstation.
Are there additional files I need to install on the workstation to make
it work or is it a permissions issue? All help would be appreciated.
Thanks in advance. Thanks again! This place rocks! Take care.
All the best,
Daniel J. Cook
-----Original Message-----
From: Sullivan, Kevin [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 18, 2002 1:56 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Customizing the MMC...
Try this...
Open ADUC and on the left hand pane right-click on the OU that you want
these admins to see... choose new window from here... Go to the windows
menu and choose the original window... Close that window... save the
.msc file out and apply NTFS permissions on the .mcs file.
Alternatively you can remove the read permission from the authenticated
users group and apply read permission to the objects that you want these
admins to see. You will need to allow them to read the root but after
that point they will only display those object that they have read
access to.
I personally like the first choice and have added tackpads to add links
to frequently used actions i.e. reset passwords etc.
<plug>
A lot of the tedium is taken out of AD administration with third party
tools such as 'Enterprise Directory Manager' from Aelita Software.
</plug>
Kevin
-----Original Message-----
From: Daniel J. Cook [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 18, 2002 2:52 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Customizing the MMC...
Dear Windows 2000 Free List,
Hello! I have a situation with customizing an MMC and I am wondering if
anyone can help. I would like to setup a custom MMC that will allow only
a certain group of users the ability to see and change one OU in our
Active Directory Users and Computers.
Currently, we have about 10 OUs and I have been trying to make a custom
MMC to my specifications. I can make a custom MMC that will allow people
to change and alter AD Users and Computers (which includes all of the
OUs) but I would like to make it more specific so that they can only
alter or change one OU. For example, I would like to create an MMC that
would only contain the "Bonga" OU and nothing else.
I have experimented with customizing MMCs but cannot seem to find a
method to create one that specific. Does anyone have any advice or
suggestions on creating a custom MMC that is OU specific? Thanks in
advance. Take care.
All the best,
Daniel J. Cook
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
