Re: Anyone know how to Use DSACLS to add perms to Machine account?

From: Talon (Talon_at_discussions.microsoft.com)
Date: 04/25/05 

Date: Mon, 25 Apr 2005 11:23:02 -0700

Hi Joe,

I am trying to add perms to a Machine Account Object for a Specific User to
allow them to Join the specific machine. Perms are as follows. But I see no
mention of such perms in DSACLS help anywhere.
Reset Password
Validated write to DNS host name
Validated write to service principal name
Write Account Restrictions

Supposedly By default, the user or group is only given the Read, Read Public
Information, Read Personal Information, and Read Account Restrictions
permissions

Thanks

"Joe Richards [MVP]" wrote:

> It is pretty much the same process for all perms. What exactly are you trying to
> accomplish?
>
> joe
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> Talon wrote:
> > I am read all the examples put the perms listed are not specific to machine
> > account perms like
> > Write Validate Host Name etc.
> > Anyone have a good example on how to use DSACLS aside from the standard cut
> > and dry and way too limited ones.
> >
> > Thanks
>

Relevant Pages

  • Re: xcacls + subfolders and files only
    ... directory) will be changed upon the creation of an account. ... if i can remove the user's ability to change perms. ... >XCACLS documentation in front of me, ... >>>PS test using CACLS or XCACLS first. ...
    (microsoft.public.win2000.security)
  • Re: export
    ... Add the "SELF" account to the "Mailbox ... Rights" on the Exchange Advanced tab of the accounts property page in ... "Additional External Account" perms and test to see if that allows it. ...
    (microsoft.public.exchange.admin)
  • Re: Anyone know how to Use DSACLS to add perms to Machine account?
    ... It is pretty much the same process for all perms. ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.security)