Delegated rights

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Is there a way to view delegated rights after using the
Delegation Wizard to grant rights to an OU?

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

it can only be done on 2003, win 2000 does not allow you
to do this.
>-----Original Message-----
>Is there a way to view delegated rights after using the
>Delegation Wizard to grant rights to an OU?
>.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

There is no wizard to do such, you would have to look at the permissions on the OU to
see what a particular users or group has. All the delegation wizard does is create
the needed permissions. It may help to compare permissions to a default OU [which you
could easily create] to see where differences in permissions exist. You can also use
dsacls to view [as in dsacls ou=myou,dc=mydomain,dc=com] and manage AD permissions on
objects and it can also reset permissions back to default with the /d switch. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;281146

"Denny Locke" <anonymous@discussions.microsoft.com> wrote in message
news:2ca3401c468f8$8ef70cf0$a301280a@phx.gbl...
> Is there a way to view delegated rights after using the
> Delegation Wizard to grant rights to an OU?

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Ding, wrong, thanks for playing, try again...

You can look at the delegated permissions either through dsacls or the security
tab of the object you are concerned about. This works on either 2K or K3.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net



anonymous@discussions.microsoft.com wrote:
> it can only be done on 2003, win 2000 does not allow you
> to do this.
>
>>-----Original Message-----
>>Is there a way to view delegated rights after using the
>>Delegation Wizard to grant rights to an OU?
>>.
>>