You know, I completely forgot about that advanced GUI screen.... You can get that in adsiedit as well and that doesn't involve editing the dssec.dat file... Also in XP/K3 there is an effective permissions screen if I recall, however there are some limitations in that.
joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Coleman, Hunter Sent: Thursday, May 13, 2004 9:39 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] View permissions of specific attributes In ADUC, pull up the properties on the object. Click on the Security tab (make sure that View->Advanced Features is turned up). Click on the Advanced button. Find the entry for the user or group you want to check on in the Permision Entries list, then click View. In the Permission Entry window, click on the Properties tab....is this what you're after? If you don't see the specific attribute you're looking for, then it may not appear in the list by default. You can edit the dssec.dat file on the machine running ADUC to change what attributes show up in the list. http://support.microsoft.com/?kbid=296490 Hunter -----Original Message----- From: David Adner [mailto:[EMAIL PROTECTED] Sent: Thursday, May 13, 2004 6:24 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] View permissions of specific attributes Unless I'm missing it, I don't see where it shows specific attributes for the object...? > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Carlos > Magalhaes > Sent: Thursday, May 13, 2004 02:36 > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] View permissions of specific attributes > > Have you also thought of running dsacls.exe (the latest version is the > version that comes with ADAM) You can specify a path i.e. > dsacls.exe /domain:<domainName> , you can also specify a specific > Active Directory path that can be denoted by prepending > \\server[:port]\ to the object, as in > > \\ADSERVER\CN=John > Doe,OU=Software,OU=Engineering,DC=Widget,DC=US > > Carlos Magalhaes - AD programming ? - > http://groups.yahoo.com/group/adsianddirectoryservices > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Gil > Kirkpatrick > Sent: Thursday, May 13, 2004 6:29 AM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] View permissions of specific attributes > > Use adsiedit, right click on an object, select Properties, then select > the Security tab. You'll see the security descriptor information > there. > > -gil > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of David Adner > Sent: Wednesday, May 12, 2004 7:09 PM > To: [EMAIL PROTECTED] > Subject: [ActiveDir] View permissions of specific attributes > > I must just be missing something, but I can't seem to find out how to > view the permissions a user has to a specific object's attributes. > I've been looking in adsiedit, ldp, dsacls... Am I close? :) > > I'm trying to verify a user has the necessary permissions to modify > certain object attributes. Any help is appreciated. Thx > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
