n3llyb0y
Fri Aug 18 08:19:22 CDT 2006
On 2006-08-17 13:32:22 +0100, n3llyb0y <n3llyb0y@aol.com> said:
> People,
>
> I'm in a situation where I need to check for and then grants rights for
> "Write Personal Information" to the SELF account on all User Accounts
> with a Domain
>
> Does anyone know how to acheive this and are there any comprehensive
> guides for Security Permissions in general?
>
> Many thanks!
>
> Neil
Solved this myself.
The extended rights can be accessed using the rightsGUID which can be
found as an attribute of the permission found using ADSIEdit and
browsing through Configuration.
So, rather than checking for a well known Hex value (such as that for
Read, Write, Change, etc) it is possible to use the rightsGUID directly
when checking for ACE's within a DALC.
http://windowssdk.msdn.microsoft.com/en-us/library/ms717873.aspx
n