Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » User permissions in AD 2003
User permissions in AD 2003 [message #337316] Mon, 07 December 2009 08:24 Go to next message
Fant  is currently offline Fant  United States
Messages: 37
Registered: September 2009
Member
Some of my users don't have a checkbox "Allow inheritable permissions
from the parent to propagate to this object and all child objects.
Include these with entries explicitly defined here" checked under
security tab in Active Directory.

Is there a way to generate a list of all users who DON’T have that
checkbox checked?
Is there a way to check the box using a script?
Thank you
Re: User permissions in AD 2003 [message #337438 is a reply to message #337316] Mon, 07 December 2009 11:00 Go to previous messageGo to next message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Fantômas schrieb:
> Some of my users don't have a checkbox "Allow inheritable permissions
> from the parent to propagate to this object and all child objects.
> Include these with entries explicitly defined here" checked under
> security tab in Active Directory.
>
> Is there a way to generate a list of all users who DON’T have that
> checkbox checked?
> Is there a way to check the box using a script?

Yeah - dsacls can do that. Check the /i and /p switches for this. I
wouldn't care about querying all objects whether they have inheritance
set or not - if they're supposed to apply inherited permission, I'd
simply run a script to set it and catch them all.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.
Re: User permissions in AD 2003 [message #337548 is a reply to message #337438] Mon, 07 December 2009 13:07 Go to previous message
Fant  is currently offline Fant  United States
Messages: 37
Registered: September 2009
Member
could someone post a sample of dsacls usage to pull the info i need?


Florian Frommherz [MVP] wrote:

> Howdie!
>
> Fantômas schrieb:
> > Some of my users don't have a checkbox "Allow inheritable
> > permissions from the parent to propagate to this object and all
> > child objects. Include these with entries explicitly defined here"
> > checked under security tab in Active Directory.
> >
> > Is there a way to generate a list of all users who DON’T have that
> > checkbox checked?
> > Is there a way to check the box using a script?
>
> Yeah - dsacls can do that. Check the /i and /p switches for this. I
> wouldn't care about querying all objects whether they have
> inheritance set or not - if they're supposed to apply inherited
> permission, I'd simply run a script to set it and catch them all.
>
> Cheers,
> Florian



--
Previous Topic:Re: Domain Controller Multiple NIC DNS problem
Next Topic:Permissions on Shared Folders
Goto Forum:
  


Current Time: Sat Jan 20 08:29:55 MST 2018

Total time taken to generate the page: 0.03547 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software