I have used subinacl - it works well for a whole range of objects but, as far as I can see, it doesn't work in AD.
Steve > -----Original Message----- > From: Todd Povilaitis [mailto:[EMAIL PROTECTED]] > Sent: 20 September 2002 16:25 > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] setting/restricting permissions on > objects in OU tree > > > There is a command line utility in the Windows 2000 Resource > Kit called SubInAcl.exe. I have not used it (yet), but it > allows you to "set" ownership. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
