Have you also thought of running dsacls.exe (the latest version is the
version that comes with ADAM) You can specify a path i.e.
dsacls.exe /domain:<domainName> , you can also specify a specific Active
Directory path that can be denoted by prepending \\server[:port]\
to the object, as in
\\ADSERVER\CN=John Doe,OU=Software,OU=Engineering,DC=Widget,DC=US
Carlos Magalhaes - AD programming ? -
http://groups.yahoo.com/group/adsianddirectoryservices
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick
Sent: Thursday, May 13, 2004 6:29 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] View permissions of specific attributes
Use adsiedit, right click on an object, select Properties, then select
the
Security tab. You'll see the security descriptor information there.
-gil
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Adner
Sent: Wednesday, May 12, 2004 7:09 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] View permissions of specific attributes
I must just be missing something, but I can't seem to find out how to
view
the permissions a user has to a specific object's attributes. I've been
looking in adsiedit, ldp, dsacls... Am I close? :)
I'm trying to verify a user has the necessary permissions to modify
certain
object attributes. Any help is appreciated. Thx
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
