Re: Determining query rights.
From: Glenn L (the.only(delete)_at_gmail.com)
Date: 12/03/04
- Next message: Test: "ADMT Tool"
- Previous message: Lee Flight: "Re: ADAM Attributes Invisible to MIIS or read incorrectly"
- In reply to: WS: "Re: Determining query rights."
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 2 Dec 2004 18:18:32 -0800
Go to the view drop down and enable advanced features
-- Glenn L CCNA, MCSE (2000,2003) + Security "WS" <me@myplace.com> wrote in message news:u6EIPeM2EHA.3392@TK2MSFTNGP10.phx.gbl... > Thanks for the info. > > Is there any way to determine the security settings for a W2K domain? I > tried using the W2K3 Users & Computers on the W2K domain, but it just > shows the usual three tabs - General, Managed By, and Group Policy. > > "gordonah" <gordonah@discussions.microsoft.com> wrote in message > news:706B3675-E059-45EB-954D-494276712437@microsoft.com... >> WS >> >> further to Glenn's answer, you can check the rights an object has over >> the >> domain using the effective rights tool. >> If in AD Users and Computers (must be W2K3 version) you right-click on >> domain and select Properties, Security, Advanced, Effective Permissions, >> you >> can then choose an object and determine it's permission from the domain >> downwards (assuming nothing interferes with standard hierarchial >> inheritance). >> To query objects I think the rights List contents, Read all properties >> and >> Read permissions are required, as per membership of the Pre-W2K >> compatible >> group. >> These are quite extensive rights over a whole domain, but can be set for >> particular OU structures or object types only. >> >> Gordon >> >> "WS" wrote: >> >>> I've been asked to check that a particular account in AD can query AD >>> itself. How can I determine this, and if it cannot query, then how do >>> you >>> give it permissions to do so? >>> >>> Thanks. >>> >>> >>> >>> > >
- Next message: Test: "ADMT Tool"
- Previous message: Lee Flight: "Re: ADAM Attributes Invisible to MIIS or read incorrectly"
- In reply to: WS: "Re: Determining query rights."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
