Re: Account question

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 05/09/03 

Date: Thu, 8 May 2003 21:35:55 -0400

You really don't think you could because the self would only apply to its own object. I.E. The user and his/her own
object, a computer and its own object. When you add a user to a group you actually modify the member attribute of the
group.

By default people can't add themselves to group, some access has to be given them to do it.

What are the details of your root problem and the desired goal. 

--
Joe Richards
www.joeware.net
--
"Victor Matei" <rvf@bebe.moc> wrote in message news:OR736rWFDHA.1660@TK2MSFTNGP10.phx.gbl...
> How would you use the "Self" to prevent any accounts from adding themselves
> to a security group ?
>
> "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message
> news:O9Wl5WPFDHA.432@TK2MSFTNGP12.phx.gbl...
> > Not sure if I have ever seen it documented.
> >
> > Self is literally self. If you give modify rights for the description
> attribute to all objects in a container and it has
> > a user named User1 and a computer named Computer1. User1 could modify
> description on User1 and Computer1 could modify
> > description on Computer1 but they couldn't modify each other.
> >
> > --
> > Joe Richards
> > www.joeware.net
> >
> > --
> >
> > "Victor Matei" <rvf@bebe.moc> wrote in message
> news:uZtfmgMFDHA.1548@TK2MSFTNGP12.phx.gbl...
> > > Can anyone point to a more exhaustive description and explanation of the
> > > "SELF" account in AD ?
> > > And an example how this is supposed to be used properly ?
> > > Thanks in advance.
> > >
> > >
> >
> >
>
>