Here is a sample VBS script that can do
this: http://support.microsoft.com/default.aspx?scid=kb;en-us;295758
Thanks,
-Steve
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, August 24, 2005
10:02 PM
To: [email protected]
Subject: [ActiveDir] Removing
SidHistory from a group object- help
I have a problem: some of our support staff migrated
Domain Admin Sids from some NT4 domains to our main Active Directory User
domain Domain Admins group: thus allow the Active Directory Domain Admins group
to be able to access many of our NT4 domains without requesting access.
I
have tried to delete the sidhistory using ADSI edit, but get access denied. I
have full control of the object, so I believe that the DSA is telling me no.
Anyone
have a good method to remove sidhistory attibutes ?
Thank You ! And have a nice day !
|
