Yeah, I figured it was being totally
locked out since you guys found the potential for exploit. As I don’t really
relish using hacking tools on my Active Directory, and Microsoft doesn’t
support it directly, I’m going to have to tell my guys here that isn’t not
going to be an option.
Brad Martin
Go Daddy Software
-----Original Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Turin, Vladimir
Sent: Thursday, January 09, 2003
12:02 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Modifying
the Active Directory
I think there are
some people who can tell you how, but they will have to kill you after that. ;)
-----Original
Message-----
From: Brad Martin
[mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 09, 2003
8:43 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Modifying
the Active Directory
A follow up: I was screwing up my syntax, which
I've now corrected, but now when I try I get an error message: "Error:
Modify: Constraint Violation <19>". I can change other values,
just not the sIDHistory one. This looks like a security feature so people
can't modify the sIDHistory and give a user Administrative permissions or some
such. Is there anything I can do to give my user account the rights to
modify sIDHistory in Active Directory?
Brad Martin
Go Daddy Software
-----Original Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brad Martin
Sent: Thursday, January 09, 2003
10:07 AM
To: Active Directory Mailing List
Subject: [ActiveDir] Modifying the
Active Directory
Is it possible, using LDP.EXE to change the sIDHistory
value of a user in the A.D.? I'd like to replace the existing sIDHistory
with a new one, but when I try a modify I get: "Error: Modify: Unwilling
to perform <53>" Is this just a rights issue with the user I'm
binding with, or is A.D. (for security reasons) not allowing me to modify that
value?
Brad
Brad Martin
Go Daddy Software
[EMAIL PROTECTED]
480.505.8800 ext. 250