Re: Setting rights on an AD account using vb



Everybody thanks for the replies.
I think I'll be going with the subinacl solution.

Doesn't seem to hard to figure out.


"Jeremy" <jeremy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DA7229DF-44A4-44C0-8CFE-25D239376171@xxxxxxxxxxxxxxxx
I'm not sure about how to do this in vbscript, but i'm pretty sure
subinacl could do it (free download from MS). It can modify permissions
on just about anything. Be careful though, the syntax is a bit
challenging.

"Albert Kikkert" <a.kikkert@xxxxxxxxx> wrote in message
news:ujgixkyhHHA.392@xxxxxxxxxxxxxxxxxxxxxxx
Dear all,

I'm looking for a way to set security rights on an active diectory user
account using Vbscript.
The thing is, we have a lot of users (12.000) in one OU and we have
multiple account operators.
However we don't want ALL operators to be able to manage all accounts.
Creating sub-OU's is not an option because users can have multiple jobs
in our company and consequently have multiple operators.

Therefore I want to be able to give account operators rights on accounts,
but ONLY the ones I want them to manage.

I found that I could get the security information using the
"ntSecurityDescriptor" object, but I cannot find anything to set them.

If anyone could post up a code snippet or at least point me in the right
direction I'd really appreciate it.

Regards,

Albert.





.



Relevant Pages

  • Re: Setting rights on an AD account using vb
    ... multiple account operators. ... Therefore I want to be able to give account operators rights on accounts, ... I have an example VBScript program that assigns the deny permissions ...
    (microsoft.public.scripting.vbscript)
  • Re: Setting rights on an AD account using vb
    ... I'm not sure about how to do this in vbscript, but i'm pretty sure subinacl could do it. ... I'm looking for a way to set security rights on an active diectory user account using Vbscript. ... Creating sub-OU's is not an option because users can have multiple jobs in our company and consequently have multiple operators. ... Therefore I want to be able to give account operators rights on accounts, but ONLY the ones I want them to manage. ...
    (microsoft.public.scripting.vbscript)
  • Setting rights on an AD account using vb
    ... I'm looking for a way to set security rights on an active diectory user ... account using Vbscript. ... we have a lot of users in one OU and we have multiple ... Therefore I want to be able to give account operators rights on accounts, ...
    (microsoft.public.scripting.vbscript)
  • Re: adminDSholder being over zealous!
    ... I have experienced the same problems, where users in members of groups ... without the account ACLs reverting to match AdminSDHolder. ... account operators can manage their own accounts or the ... >>A supported fix is now available from Microsoft, ...
    (microsoft.public.win2000.security)
  • Re: Splitting a Table with 15 Columns into Separate Tables Vs. Queries
    ... to use multiple tables is moot. ... the integrity of the data, it would be better to divide my one table ... The data is right now in one big table called Tickets. ... Account ...
    (microsoft.public.access.queries)