How to set extended rights to a group

How to set extended rights to a group

Post by Oliver Jun » Wed, 20 Jul 2005 02:17:57


Hi,

how can i set explizit extended rights to a group with adsi, in my case,
grant a group only the right "add members"?

Any tipps are welcome.

Thanks
 
 
 

How to set extended rights to a group

Post by MVP - AD » Wed, 20 Jul 2005 02:54:44

http://www.yqcomputer.com/

Joe K.

 
 
 

How to set extended rights to a group

Post by Oliver Jun » Wed, 20 Jul 2005 03:01:54

Thanks, but where can i find the schemIDGUID mentioned for "write members"?

"Joe Kaplan (MVP - ADSI)" < XXXX@XXXXX.COM > wrote
 
 
 

How to set extended rights to a group

Post by MVP - AD » Wed, 20 Jul 2005 03:38:06

 
 
 

How to set extended rights to a group

Post by Oliver Jun » Wed, 20 Jul 2005 04:36:05

Sorry, me again. I almost there. The only problem left is, that the
schemaIDGUID you gave me was for "WRITE ALL PROPERTIES", and not for "WRITE
MEMBERS" only.

"Joe Kaplan (MVP - ADSI)" < XXXX@XXXXX.COM > wrote
 
 
 

How to set extended rights to a group

Post by MVP - AD » Wed, 20 Jul 2005 06:52:28

That was the schema documentation for the control access right for group
membership in that last link. The schemaIDGUID is used when setting a
property read or write ACE for a specific attribute. The rightsGUID is used
when using the control access right.

In this case, you can either use the member attribute directly or use the
control access right (which just points to the member attribute).

The schemaIDGUID for the member attribute is in the same general part of the
schema documentation that the last link came from.

Joe K.
 
 
 

How to set extended rights to a group

Post by Oliver Jun » Wed, 20 Jul 2005 06:59:40

Yes, that was exactly what i was looking for. Thanks a lot!
Oliver

"Joe Kaplan (MVP - ADSI)" < XXXX@XXXXX.COM > wrote