Re: Access 2003 and Active Directory

HighlanderMom <HighlanderMom@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

I am fairly certain that I know the answer to this, but just in case I'm
missing something (it's been known to happen).

Is it possible to set up permissions to specific Access 2003 forms using
Active Directory groups?

I did some work with Active Directory a while back. It was quite
ugly. I took notes of the sites I visited figuring things out but
have never taken the time to organize the links. So the following is
a complete unorganized dump.

Internet resources

Following might do everything I want.
http://groups.google.ca/groups?hl=en&lr=lang_en&ie=UTF-8&safe=off&threadm=033401c30554%24deccc7a0%24a401280a%40phx.gbl&rnum=3&prev=/groups%3Fhl%3Den%26ie%3DUTF-8%26safe%3Doff%26q%3Dadsi%2Bsearch%2Borganizationalunit%26spell%3D1

Programmatically Set NTFS File System Folder Permissions

Enumerating Local Groups and Descriptions with NetLocalGroupEnum
Pasted from
<http://vbnet.mvps.org/code/network/netlocalgroupenumdesc.htm>

Enumerating Members of a Group with NetLocalGroupGetMembers
Pasted from
<http://vbnet.mvps.org/code/network/netgocalgroupgetmembers.htm>

Xcacls.exe
Pasted from
<http://support.microsoft.com/default.aspx?scid=KB;EN-US;825751>

How To Use High-Level Access Control APIs from Visual Basic
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;EN-US;295004>


http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/iadsgroup.asp

ldap
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnanchor/html/anch_activediradsi.asp

Active Directory Service Interfaces Quick-start Tutorials
Pasted from
<http://msdn.microsoft.com/library/en-us/adsi/adsi/adsi_quick-start_tutorials.asp?frame=true>


IADsAccessControlEntry
Pasted from
<http://msdn.microsoft.com/library/en-us/adsi/adsi/iadsaccesscontrolentry.asp?frame=true>

An ADSI Primer, Part 11: More on Scripting Permissions and Auditing
(Windows Scripting though)
Pasted from
<http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/7456/7456.html>


HOWTO: Use ADsSecurity.dll to Remotely Add Local Account ACEs to an
NTFS File
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;en-us;Q285998>

How To Use ADSI to Set Automatic Inheritance of File/Folder
Permissions
Pasted from <http://support.microsoft.com/kb/266461/EN-US/>

http://groups.google.ca/groups?q=group+dacl+security+permissions+group:*vb*&hl=en&lr=lang_en&safe=off&selm=3A42D078.3ED7F611%40hotmail.com&rnum=10

Various constants are at the following:
http://www.serverwatch.com/tutorials/article.php/1476721

Security and Access Rights
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/fileio/base/file_security_and_access_rights.asp


How To Use ADSI to Set Automatic Inheritance of File/Folder
Permissions
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;en-us;266461>
VBScript recursive changing of subfolders


IADsAccessControlEntry Property Methods
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/iadsaccesscontrolentry_property_methods.asp


HOWTO: Use ADsSecurity.dll to Remotely Add Local Account ACEs to an
NTFS File
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;en-us;Q285998>

How To Use ADsSecurity.dll to Add an Access Control Entry to an NTFS
Folder
Pasted from
<http://support.microsoft.com/default.aspx?scid=kb;en-us;Q279682>

Tony
--
Tony Toews, Microsoft Access MVP
Please respond only in the newsgroups so that others can
read the entire thread of messages.
Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/
.

Relevant Pages

  • Re: Active Directory authentication / authorisation
    ... Programmatically Set NTFS File System Folder Permissions ... Use ADsSecurity.dll to Remotely Add Local Account ACEs to an NTFS File ... Tony Toews, Microsoft Access MVP ...
    (comp.databases.ms-access)
  • Re: Access 2003 and Active Directory
    ... Programmatically Set NTFS File System Folder Permissions ... How To Use ADSI to Set Automatic Inheritance of File/Folder ... Tony Toews, Microsoft Access MVP ...
    (microsoft.public.access.modulesdaovba)
  • Re: Cant assign calendar permissions to a group
    ... to be able to use a security group so that I can manage membership of ... By testing I have verified that a resource calendar's permissions can ... integral concept within Active Directory. ... Only individual users can be granted membership. ...
    (microsoft.public.exchange.admin)
  • Re: Assigning members to Security Global Groups
    ... On the OU that the groups and users exist, you can delegate these permissions to a junior admin to do a variety of tasks, without them having additional permissions elsewhere in the domain. ... Best Practices for Delegating Active Directory Administration ...Dec 5, ... Administrative responsibilities for delegating Active Directory management are divided between: Service owners, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security User access question
    ... >> I am not even sure if Active Directory can provide this ... >it could be done with vbscript. ... >permissions, what permissions they have and, in the case ... >enumerate the group membership to find out the users. ...
    (microsoft.public.security)