directory ACL settings

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

does anybode know of a standard ACL for AD?

I am currently trying to unmangle a screwed up AD structure

permissions have been set by so many diff "IT employees" in so many
diff ways that I want to compare it with a normal structure

or is there some common practice guide for these things?

thnx

--
This is an automatic signature of MesNews.
Site : http://www.mesnews.net

 

[Dan]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Wat are you talking about here? ACL's on the sysvol type
stuff or more so on your data? If you're looking for the
standard ACL's on the system related items it's all
documented on the MS website I believe or what I'd do is
create a separate forest somewhere islolated and compare
the two. Anyway, be more specific and I'll be happy to
help.
Dan

>-----Original Message-----
>does anybode know of a standard ACL for AD?
>
>I am currently trying to unmangle a screwed up AD
structure
>
>permissions have been set by so many diff "IT employees"
in so many
>diff ways that I want to compare it with a normal
structure
>
>or is there some common practice guide for these things?
>
>thnx
>
>--
>This is an automatic signature of MesNews.
>Site : http://www.mesnews.net
>
>.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Are you talking about the entire thing? That would be a huge undertaking.

Do you think that the delegation wizard has been used to grant such-and-such
a person or, hopefully, group the ability to reset passwords, for example?

Or, are you talking about file and folder ACLs? Such as, on the SYSVOL
folder?



--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com



"chriske911" <chriske911@yaghoo.com> wrote in message
news:mn.258b7d5513d9c056.32006@yaghoo.com...
> does anybode know of a standard ACL for AD?
>
> I am currently trying to unmangle a screwed up AD structure
>
> permissions have been set by so many diff "IT employees" in so many diff
> ways that I want to compare it with a normal structure
>
> or is there some common practice guide for these things?
>
> thnx
>
> --
> This is an automatic signature of MesNews.
> Site : http://www.mesnews.net
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Cary Shultz [A.D. MVP] brought next idea :
> Are you talking about the entire thing? That would be a huge undertaking.
>
> Do you think that the delegation wizard has been used to grant such-and-such
> a person or, hopefully, group the ability to reset passwords, for example?
>
> Or, are you talking about file and folder ACLs? Such as, on the SYSVOL
> folder?
>
> --
> Cary W. Shultz
> Roanoke, VA 24012
> Microsoft Active Directory MVP
>
> http://www.activedirectory-win2000.com
> http://www.grouppolicy-win2000.com
>
> "chriske911" <chriske911@yaghoo.com> wrote in message
> news:mn.258b7d5513d9c056.32006@yaghoo.com...
>> does anybode know of a standard ACL for AD?
>>
>> I am currently trying to unmangle a screwed up AD structure
>>
>> permissions have been set by so many diff "IT employees" in so many diff
>> ways that I want to compare it with a normal structure
>>
>> or is there some common practice guide for these things?
>>
>> thnx
>>
>> -- This is an automatic signature of MesNews.
>> Site : http://www.mesnews.net
>>

the security setting inside the users and computers management tool
also for the exchange objects and so on

there has been some alteration done by a so called network guru
(who has left the building some time now)
his settings have then been undone on some points by others
simply because the strangest errors occured

now it is up to me to set things right ;-(
and I want to do a good job once and for all

thnx

--
just a suggestion:
http://home.in.tum.de/~jain/software/oe-quotefix/

d;-p