Re: Control Access Rights

From: "Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx>
Date: Sat, 04 Mar 2006 20:25:42 -0500

Let me answer your last question first, are Extended Rights utilized often. No not by folks outside of MS. What exactly is it that you need to do?

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net

---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

Eric Johnson wrote:

It appears I'm going to need to make use of Extended Rights (Control Access Rights) in ADAM. I've walked through the procedure of creating a custom right and granting a user that right on an AD container.

My question is, am I going to be able to ask (AccessCheck apis?) if user X has custom right Y on container Z ? Or am I going to need to do a bit of work to determine this myself (walking the AD tree structure to figure out who has access to what) ?

As a side question, are Extended Rights utilized often? I just don't see much information available on the topic.

Thanks,
Eric

Prev by Date: Re: Need to remove powerusers ability to create a share on the local c
Next by Date: Re: Granting Write Access to Active Directory User Properties
Previous by thread: Re: Need to remove powerusers ability to create a share on the local c
Next by thread: Re: Granting Write Access to Active Directory User Properties
Index(es):
- Date
- Thread

Relevant Pages

Re: Prevent from Creating Computer Objects
... No that has no impact on delegation. ... I haven't tested C, you can easily test if you can get it to work this way, set the quota mentioned previously to 0 and then grant create child for computers to the computers container for the group you want to do the joins. ... Joe Richards Microsoft MVP Windows Server Directory Services ... A.a computer object is created in that OU and workstation is jointed to domain. ...
(microsoft.public.win2000.active_directory)
Another Security Question...
... I am developing a custom Principal and Identity for a large Application. ... limit parts of my code to certain access rights (In my design, ... [PrincipalPermission] ... able to prevent him from entering that function. ...
(microsoft.public.dotnet.framework.aspnet.security)
Custom Permissions
... Does anyone have any information on creating custom permissions and ... I am developing a custom Principal and Identity for a large Application. ... limit parts of my code to certain access rights (In my design, ... [PrincipalPermission] ...
(microsoft.public.dotnet.framework.aspnet.security)
Re: Click Event of a Dynamically added object
... The Image is a custom class that has many mouse functions. ... > get that Click back to the Form Level so I can bring the image and its custom ... container, you must register a method in the container to handle the ... When you create a new Image and add it to your tab control, ...
(microsoft.public.dotnet.framework.windowsforms)
Re: Applying Audit to container of type LostAndFound
... The lostandfound class is a specific class defined by Microsoft for Microsoft. ... What do you think you get by creating your own container of that class versus a container class? ... Joe Richards Microsoft MVP Windows Server Directory Services ... LostAndFound container - but if you yourself create a new container of the type lostand found - then I would have expected it to be possible. ...
(microsoft.public.windows.server.active_directory)