Re: user security tab

is there any way I can set this?

"John M" <sdkfj@xxxxxxxxxxxxx> wrote in message
news:e%23PTnQphGHA.4404@xxxxxxxxxxxxxxxxxxxxxxx
yep that seems to do the trick
thanks

"Jorge de Almeida Pinto [MVP]"
<SubstituteThisWithMyFullNameSeparatedByDots@xxxxxxxxx> wrote in message
news:%23et0AvohGHA.3996@xxxxxxxxxxxxxxxxxxxxxxx
then that is most probably the "adminsdholder thing"

see:
http://blogs.dirteam.com/blogs/jorge/archive/2006/05/16/981.aspx

you can use the following to determine who does not have permission
inheritance enabled:
ADFIND -b "<DN of OU to check>" -s subtree -f
"(&(|(objectCategory=group)(&(objectCategory=person)(objectClass=user)))(adminCount=1))"
-dn

ADFIND can be downloaded from www.joeware.net

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"John M" <sdkfj@xxxxxxxxxxxxx> wrote in message
news:er$6RkohGHA.3756@xxxxxxxxxxxxxxxxxxxxxxx
I don't know what the adminsdholder thing is..
some users are not getting security from the parent because the box
isn't checked for some reason, how do I see who doesn't have it checked

thanks

"Jorge de Almeida Pinto [MVP]"
<SubstituteThisWithMyFullNameSeparatedByDots@xxxxxxxxx> wrote in message
news:ee%23NE7nhGHA.3424@xxxxxxxxxxxxxxxxxxxxxxx
if you are asking because of the adminsdholder thing... you could also
query for objects (users and groups) that have admincount=1

e.g.
ADFIND -b "<DN of OU to check>" -s subtree -f
"(&(|(objectCategory=group)(&(objectCategory=person)(objectClass=user)))(adminCount=1))"
-dn

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"John M" <sdkfj@xxxxxxxxxxxxx> wrote in message
news:OWwSFwnhGHA.4712@xxxxxxxxxxxxxxxxxxxxxxx
Is there a way I can check all my user objects to see if inherent
rights from parent is set on the advanced tab of the security tab?

thanks
John











.

Relevant Pages

  • Re: Install Windows Patch via GPO
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.windows.group_policy)
  • Re: Trust windows 2k to windows 2k3
    ... This posting is provided "AS-IS" with no warranties or guarantees and ... confers no rights. ... only reply to Newsgroups ...
    (microsoft.public.windows.server.active_directory)
  • Re: Trust windows 2k to windows 2k3
    ... This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. ... only reply to Newsgroups ...
    (microsoft.public.windows.server.active_directory)
  • Re: Installing a 360 Media Center Extender
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.windows.mediacenter)
  • Re: Trust windows 2k to windows 2k3
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... only reply to Newsgroups ...
    (microsoft.public.windows.server.active_directory)