[ActiveDir] New Tool... DSREVOKE.

Thu, 13 Nov 2003 08:31:15 -0800

Title: Message
Dsrevoke is a command-line tool that can be used on domain controllers that are running Windows Server 2003 or Windows 2000 Server to report the existence of all permissions for a specific user or group on a set of OUs in a domain and optionally remove from the DACLs of a set of OUs all permissions specified for a particular user or group.

Dsrevoke complements the functionality provided by the Delegation of Control Wizard, which is used to delegate administrative authority, by providing the ability to revoke delegated administrative authority.
 
-----Original Message-----
From: Creamer, Mark [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 13, 2003 10:18 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] OT: Using subinacl on a registry key

Can't find anything on this and wondered if anyone has a solution. I'm using subinacl to change permissions on a registry key in a script. The problem is that by default the key has Inherit Permissions checked, which seems to negate the change. Is there a way I can

 

1. programmatically uncheck inherit

2. copy the existing permissions

3. add my new permission setting using subinacl

 

Thanks,

 

Mark Creamer
Systems Engineer
Cintas Corporation
http://www.cintas.com
Honesty and Integrity in Everything We Do

 

Reply via email to