Yeah, I figured it was being totally locked out since you guys found the potential for exploit.  As I don’t really relish using hacking tools on my Active Directory, and Microsoft doesn’t support it directly, I’m going to have to tell my guys here that isn’t not going to be an option.

 

Brad Martin

Go Daddy Software

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Turin, Vladimir
Sent: Thursday, January 09, 2003 12:02 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Modifying the Active Directory

 

 

  I think there are some people who can tell you how, but they will have to kill you after that. ;)

Here is the reason:

 

For further reading:

 

Vladimir Turin

Aelita Software

-----Original Message-----
From: Brad Martin [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 09, 2003 8:43 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Modifying the Active Directory

A follow up:  I was screwing up my syntax, which I've now corrected, but now when I try I get an error message: "Error: Modify: Constraint Violation <19>".  I can change other values, just not the sIDHistory one.  This looks like a security feature so people can't modify the sIDHistory and give a user Administrative permissions or some such.  Is there anything I can do to give my user account the rights to modify sIDHistory in Active Directory?

 

Brad Martin

Go Daddy Software

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brad Martin
Sent: Thursday, January 09, 2003 10:07 AM
To: Active Directory Mailing List
Subject: [ActiveDir] Modifying the Active Directory

 

Is it possible, using LDP.EXE to change the sIDHistory value of a user in the A.D.?  I'd like to replace the existing sIDHistory with a new one, but when I try a modify I get: "Error: Modify: Unwilling to perform <53>"  Is this just a rights issue with the user I'm binding with, or is A.D. (for security reasons) not allowing me to modify that value?

 

Brad

 

 

Brad Martin

Go Daddy Software

[EMAIL PROTECTED]

480.505.8800 ext. 250

 

Reply via email to