최고의 답변자
AdminSDHolder - Remove groups, Server Operators, Print Operators, Backup Operators

질문
-
Dear, good afternoon.
I need to remove the following groups, Server Operators, Print Operators, Backup Operators of AdminSDHolder.
I've read the article below but not yet understood,
http://technet.microsoft.com/en-us/magazine/2009.09.sdadminholder.aspx
Anyone know what value should I put in the field dsHeuristics to remove these groups?
Thanks for the help,
Leonardo Duarte
답변
-
Hello,
Please read this article:
Understanding AdminSDHolder and Protected Groups (John Policelli - MVP)
OR, this pdf file:
An In-Depth Look at AdminSDHolder, Protected Objects, and SDPROP (John Policelli - MVP)
Regards
- 답변으로 제안됨 Arthur_LiMicrosoft contingent staff, Moderator 2012년 4월 30일 월요일 오전 8:26
- 답변으로 표시됨 Leonardo Duarte de Amorim 2012년 4월 30일 월요일 오후 2:26
모든 응답
-
Hello,
Please read this article:
Script to set/clear INHERITANCE flag on AD objects (Jorge de Almeida Pinto - MVP)
Regards
-
Part of the confusion from that blog entry is that there are no borders around that massive table.
I actually copy/pasted that whole table of groups/binary/hex into Word and gave borders to all the cells.
After that, I was able to see the following:
Group(s) to Exclude
Binary Value
Hexadecimal Value
Server Operators, Print Operators, Backup Operators
0010 + 0100 + 1000 = 1110
E
My standard disclaimer applies.
-
From what I've just read (I've never done this before), you will want to modify the 16th character in the dsHeuristics attribute with the letter E.
The ability to control groups protected by AdminSDHolder is enabled by modifying the dsHeuristic flag. This is a Unicode string in which each character contains a value for a single forest-wide setting. Character position 16 is interpreted as a hexadecimal value, where the left-most character is position 1. Therefore, the only valid values are "0" through "f". Each operator group has a specific bit, as shown in Figure 3.
My standard disclaimer applies.
-
Hello,
Please read this article:
Understanding AdminSDHolder and Protected Groups (John Policelli - MVP)
OR, this pdf file:
An In-Depth Look at AdminSDHolder, Protected Objects, and SDPROP (John Policelli - MVP)
Regards
- 답변으로 제안됨 Arthur_LiMicrosoft contingent staff, Moderator 2012년 4월 30일 월요일 오전 8:26
- 답변으로 표시됨 Leonardo Duarte de Amorim 2012년 4월 30일 월요일 오후 2:26
-
Hello,
I contacted John Policelli by email and he instructed me to put the following value to remove the groups in the field dsHeuristics.
000000000100000e
Applied in a test environment and it worked perfectly and I will soon apply to the production environment, I would like to thank everyone's help.
By - Leonardo Duarte