14.10.1 ProblemYou want to change the ACL on an object to grant or restrict access to it for a user or group. 14.10.2 Solution14.10.2.1 Using a graphical user interface
14.10.2.2 Using a command-line interface> dsacls <ObjectDN> 14.10.2.3 Using VBScriptSee Recipe 7.7, Recipe 8.2, Recipe 13.6, and Recipe 17.9 for several examples of modifying an ACL with VBScript. 14.10.3 DiscussionChanging the ACL of an object is a common task for administrators in any but the most basic AD implementations because, as shown in Recipe 14.5 and Recipe 14.6, the Delegation of Control Wizard is limited and cumbersome to extend and deploy. The GUI and command-line methods are useful for one-off changes to permissions, but for making global changes to a number of objects you should consider using a script. 14.10.4 See AlsoMS KB 281146 (How to Use Dsacls.exe in Windows 2000) |