Re: AdminSDHolder thread - How can I block??

You don't want to do that. But, if you really must, then this should help:

http://support.microsoft.com/?id=817433

--

Sincerely,
Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
<jxxrzt@xxxxxxxxx> wrote in message
news:1126744050.464443.248420@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Is there any to block the update or refresh generated by the
> AdminSDHolder thread from being applied to an individual user in one of
> the protected groups? For example, a user who's a domain admin (User1)
> wishes to grant another user (User2) "send as" permissions on his
> mailbox. Every hour or so User2 "disappears" from the security tab of
> User1 in effective removed from the ACL of User1. The options seem to
> be to add "send as" permissions for User2 to the AdminSDHolder
> container (I've tried this on my testbed but haven't quite got it to
> work even though the user permissions did "trickle down" to the groups
> and users) or remove the user from the domain admins groups and reset
> the admin count attribute. What I really want to do is just "block"
> changes for this one particular user, without affecting how
> AdminSDHolder is being applied to other groups and users. Possible or
> not? TIA
>
> -Jim
>


.

Relevant Pages

  • Re: Security question regarding directory and file permissions
    ... > is done by design. ... > user1, I create a file called testfile in that directory. ... > log in as user2, change to the test directory, and edit the file using ... I thought that file permissions would ...
    (comp.os.linux.security)
  • Security question regarding directory and file permissions
    ... RedHat 8 and RedHat 9 systems, but not on AIX or Solaris) is a bug or ... I create a directory called /test with permissions of 777. ... has permissions of 664, owner is user1, and group is user1. ... but is now owned by user2 with a group of user2. ...
    (comp.os.linux.security)
  • AdminSDHolder thread - How can I block??
    ... wishes to grant another user (User2) "send as" permissions on his ... User1 in effective removed from the ACL of User1. ... be to add "send as" permissions for User2 to the AdminSDHolder ...
    (microsoft.public.win2000.active_directory)
  • Re: Delegation - removing my name as sender
    ... However, if I remove user2 from "send of behalf" on the user1, and keep ... >> Only your Exchange administrator can do that, ... >> permissions on the other mailbox. ...
    (microsoft.public.outlook.general)
  • RE: dirty reada to committed read
    ... page then user1 is locking the whole page therefore user2 get a lock error ... I have tried setting Isolation Level to Dirty Read, ... The only isolation level that has an impact on updates and deletes is ...
    (comp.databases.informix)