Yes, they will need to wait for replication of the group membership and log off and back on again.
 
For looking at what is there, check out dsacls. If you want to come up with something specific, look at the archives as I posted a perl script to enumerate permissions previously that you can tweak to do what you want. Also I think this is up on Robbie Allen's website as well.
 
  joe


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pelle, Joe
Sent: Tuesday, May 24, 2005 7:26 AM
To: [email protected]
Subject: [ActiveDir] delegate control in AD

Dumb question:

 

If I delegate control for a group of users to reset passwords – shouldn’t I then be able to add someone to that group and then that someone can reset passwords?!

 

Also, is there a way to view what delegations have been done so far?

 

Active Directory 2003/

 

Thanks!

 

Joe Pelle

Senior Infrastructure Architect

Information Technology

Valassis / IT

19975 Victor Parkway Livonia, MI 48152

Tel 734.591.7324  Fax 734.632.6151

[EMAIL PROTECTED]

http://www.valassis.com/

 

This message may include proprietary or protected information. If you are not the intended recipient, please notify me, delete this message, and do not further communicate the information contained herein without my express written consent.

 

Reply via email to