Re: AD object permission list by Joe
Joe
Sun Feb 05 22:06:25 CST 2006
You can just query the schema for the attributeSchema objects that are not
defunct and get their ldapDisplayName attribute. Do you need a sample?
If you want the property sets, you need to read the extended rights objects.
Joe K.
"Victor Zaslavsky" <victor@newsgroups.nospam> wrote in message
news:udZnsuiKGHA.1508@TK2MSFTNGP10.phx.gbl...
> Hi,
>
> We need the list of properties to show in the property page. The function
> DsCreateSecurityPage does it on Windows 2003. However we have to do it on
> Windows XP.
>
> Thanks,
> Victor.
>
> "Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@removethis.accenture.com> wrote
> in message news:OPUe5%23BKGHA.140@TK2MSFTNGP12.phx.gbl...
>> Are you taking about converting the property GUIDs to property names and
>> the access rights GUIDs to the friendly name for those?
>>
>> Joe K.
>>
>> "Victor Zaslavsky" <victor@newsgroups.nospam> wrote in message
>> news:efRdILBKGHA.1728@TK2MSFTNGP09.phx.gbl...
>>> Hi all,
>>>
>>> We are trying to create a security property page exactly the same as in
>>> the Active Directory Users and Computers mmc snapin. So, we need names
>>> of permissions to be shown. Could any body help to find API to enumerate
>>> and read these strings?
>>>
>>> Thanks in Advance,
>>>
>>> Victor.
>>>
>>>
>>
>>
>
>