I'm trying to write an IPSec editor for the operations folks and I need to make sure that they can only edit specific rules.
Does anyone know how to delegate rights to modify specific IPSec Filter Rules and Filter Lists? Are they stored in AD somewhere? Or are they in the registry on the DCs? I was also thinking that I could use a service account with elevated privileges to perform the operations; however, I'm not sure if I can specify alternate creds when performing the edits. Thanks! List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
