That's it !!! :-)
  I did not thought to update with the new release of adfind, and that works 
perfectly.
   
  Many thanks Joe !
   
  Yann

joe <[EMAIL PROTECTED]> a écrit :
      What is the version? Current version of AdFind that is publicly available 
is V01.35.00. The -resolvesids option made it into AdFind around V01.31.00 or 
so which was a year ago.
   
  Plus if you really want something readable you likely want -sddl++
   
     joe
   
    --
  O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm 
   

   

    
---------------------------------
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yann
Sent: Tuesday, January 09, 2007 5:59 AM
To: [email protected]
Subject: RE : RE: [ActiveDir] Decode the msExchMailboxSecurityDescriptor 
attribute.


  
  Oh, thanks Joe !
   
  the command 
  adfind -b "DN_OU" -f msExchMailboxSecurityDescriptor=* 
msExchMailboxSecurityDescriptor -sddl -adcsv  works fine.
   
  But when I add -resolvesids as this
  
adfind -b "DN_MyOU" -f msExchMailboxSecurityDescriptor=* 
msExchMailboxSecurityDescriptor -sddl -resolvesids -adcsv  
   
  It shows an error
  ERROR: Bad Command Line Arg(s)
ERROR:  resolvesids
   
  Thanks,
   
  Yann
  
joe <[EMAIL PROTECTED]> a écrit :
      Yes it is a binary octet string, it is a normal security descriptor and 
can be manipulated like you would manipulate security descriptors in compiled 
apps normally. If you are scripting, then use adfind to dump the attribute with 
the -sddl+ or -sddl++ switches and if you want the SIDs and SDDL encoded 
secprins decoded use -resolvesids.
   
    joe
   
    --
  O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm 
   

   

    
---------------------------------
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yann
Sent: Monday, January 08, 2007 5:42 PM
To: [email protected]
Subject: [ActiveDir] Decode the msExchMailboxSecurityDescriptor attribute.


  
  Hello,
   
  I'd like to dump the msExchMailboxSecurityDescriptor attribute of a user 
object into readable format. It seems that the value is in binary blob format.
   
  Is there a way to do this ?
   
  Thanks,
   
  Yann
   
  __________________________________________________
Do You Yahoo!?
En finir avec le spam? Yahoo! Mail vous offre la meilleure protection possible 
contre les messages non sollicités 
http://mail.yahoo.fr Yahoo! Mail 

  __________________________________________________
Do You Yahoo!?
En finir avec le spam? Yahoo! Mail vous offre la meilleure protection possible 
contre les messages non sollicités 
http://mail.yahoo.fr Yahoo! Mail 


 __________________________________________________
Do You Yahoo!?
En finir avec le spam? Yahoo! Mail vous offre la meilleure protection possible 
contre les messages non sollicités 
http://mail.yahoo.fr Yahoo! Mail 

Reply via email to