People,

I'm in a situation where I need to check for and then grants rights for
"Write Personal Information" to the SELF account on all User Accounts
with a Domain

Does anyone know how to acheive this and are there any comprehensive
guides for Security Permissions in general?

Many thanks!

Neil

Re: how to set Object Extended Security Permissions by n3llyb0y

n3llyb0y
Fri Aug 18 08:19:22 CDT 2006

On 2006-08-17 13:32:22 +0100, n3llyb0y <n3llyb0y@aol.com> said:

> People,
>
> I'm in a situation where I need to check for and then grants rights for
> "Write Personal Information" to the SELF account on all User Accounts
> with a Domain
>
> Does anyone know how to acheive this and are there any comprehensive
> guides for Security Permissions in general?
>
> Many thanks!
>
> Neil

Solved this myself.

The extended rights can be accessed using the rightsGUID which can be
found as an attribute of the permission found using ADSIEdit and
browsing through Configuration.

So, rather than checking for a well known Hex value (such as that for
Read, Write, Change, etc) it is possible to use the rightsGUID directly
when checking for ACE's within a DALC.

http://windowssdk.msdn.microsoft.com/en-us/library/ms717873.aspx

n