Actually I think he replied to this one in the bar of the
Renaissance as him, myself, and Dean were chatting about it while drinking
and Ulf was working on his pda/phone.
BTW Guido, you slipped out like a phantom man. Sorry you
had other responsibilities to deal with. Would have been nice to have had you
around longer and especially when sitting with the Dev guys. We had a lot of
fun.
Also BTW, the Dev guys said that Universal groups were
all a huge mistake and no one should be using them... Do Exchange in a separate
single domain forest.... j/k.... But I think they would have said that had we
discussed it. I had something else on my mind when we chatted with them that was
more important to me than Universal Groups and Domain Local Groups.
Another also BTW, Dean and I talked out an interesting
idea, you may like it when we have the result ready. An idea to hopefully kill
the entire lag site paradigm by making it unnecessary. Never was a fan of that
idea but I do like the idea of DR sites for grabbing backups off of as I have
discussed previously.
joe
-------------
http://www.joeware.net (download joeware)
http://www.cafeshops.com/joewarenet (wear joeware)
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido
Sent: Friday, April 09, 2004 1:29 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] using dsacls.exe
Hey Ulf - I see you got home from the summit safely
;-)
In your AD newsgroup post which your referenced below
you answered the following question
>> Is there a comprehensive reference that
identifies each permission required
>> to perform a task ? Giving a user the "AddUser" permission is not enough.
>> They also have to have the rights to add objects and child objects, etc
>> etc...
with
> Not that I'm aware off - the rights I don't know I set with the delegation
>> to perform a task ? Giving a user the "AddUser" permission is not enough.
>> They also have to have the rights to add objects and child objects, etc
>> etc...
with
> Not that I'm aware off - the rights I don't know I set with the delegation
> wizard and
run dsacls or look into the security tab.
Just
want to make sure that everyone is aware of the excellent Delegation Whitepaper,
that's been available for a couple of months now:
And
don't forget to download the Appendix for this whitepaper, which contains all
the nitty gritty details on what's required to perform which
task.
/Guido
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-Weidner
Sent: Donnerstag, 8. April 2004 17:10
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] using dsacls.exe
Hello Bart,
see the following post:
Ulf B. Simon-Weidner
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vermeire Bart
Sent: Dienstag, 6. April 2004 06:43
To: [EMAIL PROTECTED]
Subject: [ActiveDir] using dsacls.exe
Hi,
I am struggling
with the dsacls.exe tool and hope that someone in this list can answer
me.
I need to set
permissions on an OU from a CMD line batch file and I am using dsacls.exe for
that.
However, setting
the "Reset Password" extended right is one task I cannot
accomplish.
Can you please
help me out here.
regards,
Bart
Vermeire
Volvo
IT
