Re: Modify Active Directory ACL for a Group

Forums

My Profile

Inbox

Address Book

My Subscription

My Forums

Re: Modify Active Directory ACL for a Group

Logged in as: Guest

arrSession:exec spGetSession 2,2,2138

	Active Users: There are 0 members and 0 guests.
	Users viewing this topic: none

Printable Version

All Forums >> [Scripting] >> WSH & Client Side VBScript >> Re: Modify Active Directory ACL for a Group
Do you like VisualBasicScript.com? Link to us and help spread the word about our forum. Thanks!

Page: << < prev 1 2 [3]

Message

<< Older Topic Newer Topic >>

Re: Modify Active Directory ACL for a Group - 3/30/2005 4:22:52 PM

chan_fookmun

Posts: 22
Score: 0
Joined: 3/17/2005
From:
Status: offline

Hi token,
i just went to the server 2003 to explore and found that there did not exist a class called "container" when you create a new object. Only classes like "computers","contact","printer", "shared folder" etc can be found. In ADAM when i create a new object, classes like "container","country","locality" etc can be found...

That means to say a "container" object will start its DN as "CN=" and a "country" object will start its DN as "C="

I believe the problem does not lie in the LDAP path. It has something to with the SetInfo method in vbscript or the CommitChanges method in .NET. This can be indirectly caused by some settings which can be the OS.....

Maybe i mislead you the term "container" somewhere and thus i will like to clarify it

(in reply to byarnell)

Post #: 41

Re: Modify Active Directory ACL for a Group - 3/31/2005 12:38:31 AM

token

Posts: 1917
Score: 0
Joined: 1/14/2005
From:
Status: offline

I had no experience so I can't only speculate on what went wrong. In the world of ADSI, a container object can be either an OU or a domain. Therefore, to put what you have into the correct ADsPath, it would be: CN=grouptest,OU=Roles,DC=KKK,DC=SG. What this says is that a group object called Grouptest resides in an OU call Roles which DIRECTLY belongs to a domain call KKK.sg.

AGAIN, ONLY if you could post the exact ADsPath (or whatever it is called in the ADAM world, you may modify the NAME of the exact names if you don't wish to have the REAL name posted in public) of the Grouptest object and post the results from the following command, I'm afraid I can't be of more help since I don't have ADAM to test.

wscript.echo typename(OU) & vbtab & isnull(OU) & vbtab & isempty(OU)

Regards.

(in reply to byarnell)

Post #: 42

Re: Modify Active Directory ACL for a Group - 3/31/2005 12:21:33 PM

chan_fookmun

Posts: 22
Score: 0
Joined: 3/17/2005
From:
Status: offline

No actually you are a great help to me. At least your code is able to run in my ADAM instance in server 2003 successfully. It is a pity that in windows xp it cannot be run.Anyway thank you for your help....

(in reply to byarnell)

Post #: 43

Re: Modify Active Directory ACL for a Group - 3/31/2005 1:35:26 PM

token

Posts: 1917
Score: 0
Joined: 1/14/2005
From:
Status: offline

No problem =)

(in reply to byarnell)

Post #: 44

Re: Modify Active Directory ACL for a Group - 4/4/2005 8:34:02 PM

chan_fookmun

Posts: 22
Score: 0
Joined: 3/17/2005
From:
Status: offline

Hi token,
i have found out the cause of the problem in the following url:
http://www.ldaps.com/forums/article.php?group=microsoft.public.adsi.general&id=%3C%23QnIh%24iAFHA.3472%40TK2MSFTNGP14.phx.gbl%3E

Do you have any suggestion on how to tackle it in a proper way?
Thanks a lot

(in reply to byarnell)