Hi Ray,
As a general comment, quite a few "interesting" attributes
(136 of them in AD2003) already belong to some predefined property set. And each
attribute can (unfortunately) belong to only one property
set.
In AD2003 you could remove some of them and put in your own
property sets. However, there is quite a risk that this would break something,
and you would also be out of Microsoft support. Therefore, in my opinion, you
shouldn't touch anything predefined.
So the short answer to "how I can" is: you probably cannot
in a sensible way.
The long answer (well, this is quite shameless...) is in
our book's (Inside Active Directory) long chapters on permission architecture
and extending the schema.
If you add your own attributes to the schema, those would
be excellent candidates for putting in your own property
set.
Yours, Sakari
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rascher, Raymond
Sent: Friday, July 22, 2005 12:31 AM
To: '[email protected]'
Subject: [ActiveDir] Creating Property SetsCan anyone point me in the right direction on how I can create a property set and then use for assigning permissions?Thanks,Ray
