user security tab

  • Thread starter Thread starter John M
  • Start date Start date
J

John M

Is there a way I can check all my user objects to see if inherent rights
from parent is set on the advanced tab of the security tab?

thanks
John
 
if you are asking because of the adminsdholder thing... you could also query
for objects (users and groups) that have admincount=1

e.g.
ADFIND -b "<DN of OU to check>" -s subtree -f
"(&(|(objectCategory=group)(&(objectCategory=person)(objectClass=user)))(adminCount=1))"
-dn

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
 
I don't know what the adminsdholder thing is..
some users are not getting security from the parent because the box isn't
checked for some reason, how do I see who doesn't have it checked

thanks

"Jorge de Almeida Pinto [MVP]"
 
then that is most probably the "adminsdholder thing"

see:
http://blogs.dirteam.com/blogs/jorge/archive/2006/05/16/981.aspx

you can use the following to determine who does not have permission
inheritance enabled:
ADFIND -b "<DN of OU to check>" -s subtree -f
"(&(|(objectCategory=group)(&(objectCategory=person)(objectClass=user)))(adminCount=1))"
-dn

ADFIND can be downloaded from www.joeware.net

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
 
some of the users that show up using this already have the inheritance
enabled.. any idea why?
 
Hi John M

Strange....

Did you read the Jorge's article???
You'll find everything that you need to!!!

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator
 
By the way, nice article Jorge :)

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator
 
sorry I didn't see the link before... I'll check it out
I have some more questions, but I'll read 1st and see if they get answered

"Jorge de Almeida Pinto [MVP]"
 
Yep do that...
Don't be Lazy.. :)

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator
 
Back
Top