directory ACL settings

  • Thread starter Thread starter chriske911
  • Start date Start date
C

chriske911

does anybode know of a standard ACL for AD?

I am currently trying to unmangle a screwed up AD structure

permissions have been set by so many diff "IT employees" in so many
diff ways that I want to compare it with a normal structure

or is there some common practice guide for these things?

thnx
 
Wat are you talking about here? ACL's on the sysvol type
stuff or more so on your data? If you're looking for the
standard ACL's on the system related items it's all
documented on the MS website I believe or what I'd do is
create a separate forest somewhere islolated and compare
the two. Anyway, be more specific and I'll be happy to
help.
Dan
 
Are you talking about the entire thing? That would be a huge undertaking.

Do you think that the delegation wizard has been used to grant such-and-such
a person or, hopefully, group the ability to reset passwords, for example?

Or, are you talking about file and folder ACLs? Such as, on the SYSVOL
folder?



--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
 
Cary Shultz [A.D. MVP] brought next idea :
Are you talking about the entire thing? That would be a huge undertaking.

Do you think that the delegation wizard has been used to grant such-and-such
a person or, hopefully, group the ability to reset passwords, for example?

Or, are you talking about file and folder ACLs? Such as, on the SYSVOL
folder?

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
Click to expand...

the security setting inside the users and computers management tool
also for the exchange objects and so on

there has been some alteration done by a so called network guru
(who has left the building some time now)
his settings have then been undone on some points by others
simply because the strangest errors occured

now it is up to me to set things right ;-(
and I want to do a good job once and for all

thnx
 
Back
Top