Re: extend permissions in AD

Tech-Archive recommends: Fix windows errors by optimizing your registry

"aks" <aks@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:aks@xxxxxxxxxxxxxxxxxxxxxxxxx:

Is there a way to extend the set of permissions in AD?  Can I add
something
like: edit directions, modify directions etc. ? thanks.


Hello aks,

what exactly do you want to do? You can change permissions on every attribute using the security tabs of Active Directory-Users and -Computers (in advanced view) or in ADSIEdit. Further there is the commandline tool DSAcls which allows you to view and edit permissions.

Or do you want the extend the options in the delegation wizard? You can do this by modifying the delegwiz.inf-File. It's mentioned in the Active Directory Delegation Whitepaper - a very good reference I'd recommend if you want to delegate certain tasks. Make sure that you also download and read the appendixes of the whitepaper.

http://www.microsoft.com/downloads/details.aspx?FamilyID=631747a3-79e1-48fa-9730-dae7c0a1d6d3

http://www.microsoft.com/downloads/details.aspx?FamilyId=29dbae88-a216-45f9-9739-cb1fb22a0642

--
Gruesse - Sincerely,

Ulf B. Simon-Weidner

 MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
 Weblog: http://msmvps.org/UlfBSimonWeidner
 Website: http://www.windowsserverfaq.org


.