Kevin,
You're spot on with the .dll. It's DSAdmin.dll that does the primary
work in AD U&C with a CLSID of {E355E538-1C2E-11D0-8C37-00C04FD8FE93}.
This would have been the CLSID of the interface missing from Daniel's
post.
Rick Kingslan - Microsoft MVP [Windows NT/2000]
Microsoft Certified Trainer
MCSA, MCSE+I - Windows NT / 2000
"Any sufficiently advanced technology
is indistinguishable from magic."
--- Arthur C. Clarke
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of
> Sullivan, Kevin
> Sent: Wednesday, September 18, 2002 3:58 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] Customizing the MMC...
>
>
> Daniel,
>
> You will need to register the appropriate .dll. That will
> make the ADUC snap-in available which is what is being called
> by the custom .msc file that you just created. Copy the
> correct .dll file to the client syststem and register it using,
>
> Regsvr32.exe %path%\*.dll
>
> The file is possibly dsadmin.dll although I am not positive.
> I will try to find out. You don't need to install the
> administration tools on the client machine that is a bit overkill.
>
> Anyone know the correct .dll?
>
> Kevin
>
> -----Original Message-----
> From: Daniel J. Cook [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, September 18, 2002 3:56 PM
> To: [EMAIL PROTECTED]
> Cc: Sullivan, Kevin
> Subject: RE: [ActiveDir] Customizing the MMC...
>
> Dear Kevin,
>
> Thanks a bunch for the help! It is deeply appreciated! I am
> already pumped about this group already! However, I have
> another question;
>
> I created the custom mmc as you explained below on a domain
> controller in our test domain. I called the mmc "students."
> It worked fine on the domain controller but then when I moved
> it to another workstation in the domain and tried to run it I
> received the following error:
>
> Snap-in failed to initialize.
> Name: <unknown>
> CLSID: {then a very long number}
>
> I logged on as the appropriate user who was delegated control
> of the OU, etc... I am just a little puzzled why it worked on
> the DC and not on the workstation.
>
> Are there additional files I need to install on the
> workstation to make it work or is it a permissions issue? All
> help would be appreciated. Thanks in advance. Thanks again!
> This place rocks! Take care.
>
> All the best,
>
> Daniel J. Cook
>
> -----Original Message-----
> From: Sullivan, Kevin [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, September 18, 2002 1:56 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] Customizing the MMC...
>
> Try this...
>
> Open ADUC and on the left hand pane right-click on the OU
> that you want these admins to see... choose new window from
> here... Go to the windows menu and choose the original
> window... Close that window... save the .msc file out and
> apply NTFS permissions on the .mcs file.
>
> Alternatively you can remove the read permission from the
> authenticated users group and apply read permission to the
> objects that you want these admins to see. You will need to
> allow them to read the root but after that point they will
> only display those object that they have read access to.
>
> I personally like the first choice and have added tackpads to
> add links to frequently used actions i.e. reset passwords etc.
>
> <plug>
> A lot of the tedium is taken out of AD administration with
> third party tools such as 'Enterprise Directory Manager' from
> Aelita Software.
> </plug>
>
> Kevin
>
> -----Original Message-----
> From: Daniel J. Cook [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, September 18, 2002 2:52 PM
> To: [EMAIL PROTECTED]
> Subject: [ActiveDir] Customizing the MMC...
>
>
>
> Dear Windows 2000 Free List,
>
> Hello! I have a situation with customizing an MMC and I am
> wondering if anyone can help. I would like to setup a custom
> MMC that will allow only a certain group of users the ability
> to see and change one OU in our Active Directory Users and Computers.
>
> Currently, we have about 10 OUs and I have been trying to
> make a custom MMC to my specifications. I can make a custom
> MMC that will allow people to change and alter AD Users and
> Computers (which includes all of the
> OUs) but I would like to make it more specific so that they
> can only alter or change one OU. For example, I would like to
> create an MMC that would only contain the "Bonga" OU and nothing else.
>
> I have experimented with customizing MMCs but cannot seem to
> find a method to create one that specific. Does anyone have
> any advice or suggestions on creating a custom MMC that is OU
> specific? Thanks in advance. Take care.
>
> All the best,
>
> Daniel J. Cook
> List info : http://www.activedir.org/mail_list.htm
> List FAQ : http://www.activedir.org/list_faq.htm
> List archive:
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
>
> List info :
> http://www.activedir.org/mail_list.htm
> List FAQ : http://www.activedir.org/list_faq.htm
> List archive:
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
>
> List info :
> http://www.activedir.org/mail_list.htm
> List FAQ : http://www.activedir.org/list_faq.htm
> List archive:
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
>
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
