AdminSDHolder - Remove groups, Server Operators, Print Operators, Backup Operators

모든 응답

• 

  

  0

  로그인하여 투표

  Hello,

  Please read this article:

  Script to set/clear INHERITANCE flag on AD objects (Jorge de Almeida Pinto - MVP)

  Regards

  2012년 4월 27일 금요일 오후 4:46

  응답

  |

  인용
• 

  

  0

  로그인하여 투표

  Part of the confusion from that blog entry is that there are no borders around that massive table.

  I actually copy/pasted that whole table of groups/binary/hex into Word and gave borders to all the cells.

  After that, I was able to see the following:

  Group(s) to Exclude	Binary Value	Hexadecimal Value
  Server Operators, Print Operators, Backup Operators	0010 + 0100 + 1000 =   1110	E

  ---

  My standard disclaimer applies.

  2012년 4월 27일 금요일 오후 5:54

  응답

  |

  인용
• 

  

  0

  로그인하여 투표

  So the value would look like?
  
  0010010010001110E (17 characters?)
  
  What would be the correct value ?
  
  
  This is what I did not understand.
  
  Leonardo Duarte
  

  2012년 4월 27일 금요일 오후 7:14

  응답

  |

  인용
• 

  

  0

  로그인하여 투표

  From what I've just read (I've never done this before), you will want to modify the 16th character in the dsHeuristics attribute with the letter E.

  The ability to control groups protected by AdminSDHolder is enabled by modifying the dsHeuristic flag. This is a Unicode string in which each character contains a value for a single forest-wide setting. Character position 16 is interpreted as a hexadecimal value, where the left-most character is position 1. Therefore, the only valid values are "0" through "f". Each operator group has a specific bit, as shown in Figure 3.

  ---

  My standard disclaimer applies.

  2012년 4월 27일 금요일 오후 7:36

  응답

  |

  인용
• 

  

  1

  로그인하여 투표

  Hello,

  Please read this article:

  Understanding AdminSDHolder and Protected Groups (John Policelli - MVP)

  OR, this pdf file:

  An In-Depth Look at AdminSDHolder, Protected Objects, and SDPROP (John Policelli - MVP)

  

  

  Regards

  • 답변으로 제안됨 Arthur_LiMicrosoft contingent staff, Moderator 2012년 4월 30일 월요일 오전 8:26
  • 답변으로 표시됨 Leonardo Duarte de Amorim 2012년 4월 30일 월요일 오후 2:26

  2012년 4월 27일 금요일 오후 8:49

  응답

  |

  인용
• 

  

  0

  로그인하여 투표

  Hello,
  
  I contacted John Policelli by email and he instructed me to put the following value to remove the groups in the field dsHeuristics.
  
  000000000100000e
  
  Applied in a test environment and it worked perfectly and I will soon apply to the production environment, I would like to thank everyone's help.
  
  By - Leonardo Duarte

  2012년 4월 30일 월요일 오후 2:26

  응답

  |

  인용