Re: Determining query rights.

From: WS (me_at_myplace.com)
Date: 12/02/04 

Date: Fri, 3 Dec 2004 12:35:04 +1300

Thanks for the info.

Is there any way to determine the security settings for a W2K domain? I
tried using the W2K3 Users & Computers on the W2K domain, but it just shows
the usual three tabs - General, Managed By, and Group Policy.

"gordonah" <gordonah@discussions.microsoft.com> wrote in message
news:706B3675-E059-45EB-954D-494276712437@microsoft.com...
> WS
>
> further to Glenn's answer, you can check the rights an object has over the
> domain using the effective rights tool.
> If in AD Users and Computers (must be W2K3 version) you right-click on
> domain and select Properties, Security, Advanced, Effective Permissions,
> you
> can then choose an object and determine it's permission from the domain
> downwards (assuming nothing interferes with standard hierarchial
> inheritance).
> To query objects I think the rights List contents, Read all properties and
> Read permissions are required, as per membership of the Pre-W2K compatible
> group.
> These are quite extensive rights over a whole domain, but can be set for
> particular OU structures or object types only.
>
> Gordon
>
> "WS" wrote:
>
>> I've been asked to check that a particular account in AD can query AD
>> itself. How can I determine this, and if it cannot query, then how do you
>> give it permissions to do so?
>>
>> Thanks.
>>
>>
>>
>>

Relevant Pages

  • RE: Permissions causing error on export?
    ... The Access security permissions might limit a user if they con't have ... I assume they can run the query fine within Access? ... Do MDW security settings affect VBA programming in using export/import ...
    (microsoft.public.access.security)
  • Re: Grant admin rights to user temporarily
    ... The issue is that I have a database with empty tables, as it should, when I ... > rights to give themself rights... ... > Consequently the code, acting with the permissions of your user, can't give ... > the case of an action query, to run the query, even if they are otherwise ...
    (microsoft.public.access.security)
  • Re: Grant admin rights to user temporarily
    ... One of the points of not giving a user rights is to also not give them ... Consequently the code, acting with the permissions of your user, can't give ... permissions" query -- that's a query that you enable to run with the ... Microsoft Visio MVP ...
    (microsoft.public.access.security)
  • Re: Grant admin rights to user temporarily
    ... > rights to give themself rights... ... > Consequently the code, acting with the permissions of your user, can't give ... > the case of an action query, to run the query, even if they are otherwise ... > Microsoft Visio MVP ...
    (microsoft.public.access.security)
  • ODBC Linked Table Security
    ... I created a report based from a query from an ODBC linked ... Anyone know what permissions need changes? ... The users have the rights to the folder where the front ...
    (microsoft.public.access.externaldata)