To clarify what Steve said, on #15, it is the 7th bit when indexed at 0. So value 128 is the value of choice. 64, while interesting, is ADAM only. :)
There was a doc on this somewhere once before.....in the beta timeframe....up on MS.com. I can't find it now, but I'll poke around again in a few. ~Eric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Patrick Sent: Saturday, April 02, 2005 9:08 AM To: [email protected] Subject: Re: [ActiveDir] 2003 SP1 RTM #16 Looks like this has been around since early 2004 ( i dont have a non SP1 2003 DC to test on right now) Basically you set the first bit on the flags attribute of the Display Specifiers object - cn=Display Specifiers,cn=Configuration etc... and then it will disable drag and drop. #15 - You can mark an attribute to require more than just read access to it. You set the SearchFlags 7th bit on the desired attribute in the schema. Once this is done, anyone who wishes to view this attribute will also require CONTROL_ACCESS. steve ----- Original Message ----- From: "Tomasz Onyszko" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, April 01, 2005 12:31 AM Subject: Re: [ActiveDir] 2003 SP1 RTM > Grillenmeier, Guido wrote: >> I'd add these as important ones to the list: >> >> 15) ability to set cetain attributes to be "confidential" - i.e. they >> can't be read with normal "Read" permissions on an object >> >> 16) ability to configure Drag & Drop in ADUC >> >> 17) ability to configure visibility of foreign Universal Group >> memberships in ADUC > > Guido, can You point me to some description of 15 and 16? > > -- > Tomasz Onyszko [MVP] > [EMAIL PROTECTED] > http://www.w2k.pl > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
