No??? Child domain.
> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Matheesha Weerasinghe > Sent: Monday, August 14, 2006 17:38 > To: [email protected] > Subject: Re: [ActiveDir] Recreate BUILTIN\Incoming Forest > Trust Builders > > By the way you are looking for this on the forest root right? > > M@ > > > On 8/14/06, Han Valk <[EMAIL PROTECTED]> wrote: > > Yep logged in as Domain Admin. > > > -----Original Message----- > > From: [EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]> > > [mailto:[EMAIL PROTECTED] On Behalf Of > > Matheesha Weerasinghe > > Sent: Monday, August 14, 2006 13:00 > > To: [email protected] > > Subject: Re: [ActiveDir] Recreate BUILTIN\Incoming Forest > > Trust Builders > > > > I am wondering if there are ACLs defined on the group itself > > or the OU above to prevent you from seen it. Do you see it as > > the Administrator account of the domain? > > > > M@ > > > > > > On 8/14/06, Han Valk < [EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]> > wrote: > > > > Problem is I don't see it anymore in the BUILTIN > > container. Strange thing is > > that if I look at the security of the domain object in > > ADUC Incoming Forest > > Trust Builders is there. > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto: [EMAIL PROTECTED] > > <mailto:[EMAIL PROTECTED]> ] On Behalf Of > > > Matheesha Weerasinghe > > > Sent: Monday, August 14, 2006 10:22 > > > To: [email protected] > > > Subject: Re: [ActiveDir] Recreate > BUILTIN\Incoming Forest > > > Trust Builders > > > > > > I dont think so. objectsid attribute is a systemonly > > > attribute. Personally I am impressed of that "smart > > > co-worker" that managed to delete it. > According to the AD > > > Delegation appendices > > > > > http://www.microsoft.com/downloads/details.aspx?FamilyID=29dba > > e88-a216-45f9-9739-cb1fb22a0642&DisplayLang=en > > > > <http://www.microsoft.com/downloads/details.aspx?FamilyID=29db > > ae88-a216-45f9-9739-cb1fb22a0642&DisplayLang=en> its > > not > possible to move > > delete rename this group. > > > > > > May be he exploited the dynamic objects > feature in Windows > > > 2003 RTM? > > > > > > http://blogs.dirteam.com/blogs/tomek/archive/2006/06/23/1175.aspx > > > > > > > > > M@ > > > > > > > > > > > > On 8/14/06, Han Valk <[EMAIL PROTECTED]> wrote: > > > > > > Hi, > > > > > > A smart co-worker deleted the > BUILTIN\Incoming Forest > > > Trust Builders group. > > > Is it possible to recreate this group > with the same > > > well known SID? > > > Authoritative restore is out of the question, > > > deletetion is too long ago. > > > > > > Han Valk. > > > List info : > http://www.activedir.org/List.aspx > <http://www.activedir.org/List.aspx> > > > List FAQ : > http://www.activedir.org/ListFAQ.aspx > > > List archive: > http://www.activedir.org/ml/threads.aspx > <http://www.activedir.org/ml/threads.aspx> > > > > > > > > > > > > > > List info : http://www.activedir.org/List.aspx > > <http://www.activedir.org/List.aspx> > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.activedir.org/ml/threads.aspx > > > > > > > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ml/threads.aspx > > > > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
