Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

 

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Forums >ActiveDir Mail List Archive >List Archives
Subject: [ActiveDir] Removing SidHistory from a group object- help
Prev Next
You are not authorized to post a reply.

AuthorMessages
AD000001229User is Offline

Posts:0

08/25/2005 3:05 AM  
I have a problem: some of our support
staff migrated Domain Admin Sids from some NT4 domains to our main Active
Directory User domain Domain Admins group: thus allow the Active Directory
Domain Admins group to be able to access many of our NT4 domains without
requesting access.

I have tried to delete the sidhistory
using ADSI edit, but get access denied. I have full control of the object,
so I believe that the DSA is telling me no.

Anyone have a good method to remove
sidhistory attibutes ?

Thank You ! And have a nice day !
slinehanUser is Offline

Posts:18

08/25/2005 3:11 AM  
Here is a sample VBS script that can do
this: http://support.microsoft.com/default.aspx?scid=kb;en-us;295758



Thanks,



-Steve



From:
ActiveDir-owner@xxxxxxxxxxxxxxxxxx [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Mark.H.Lunsford@xxxxxx
Sent: Wednesday, August 24, 2005
10:02 PM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Removing
SidHistory from a group object- help


I have a problem: some of our support staff migrated
Domain Admin Sids from some NT4 domains to our main Active Directory User
domain Domain Admins group: thus allow the Active Directory Domain Admins group
to be able to access many of our NT4 domains without requesting access.

I
have tried to delete the sidhistory using ADSI edit, but get access denied. I
have full control of the object, so I believe that the DSA is telling me no.
Anyone
have a good method to remove sidhistory attibutes ?

Thank You ! And have a nice day !
You are not authorized to post a reply.
Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Removing SidHistory from a group object- help



ActiveForums 3.7
Friends

Friends

VisualClickButoton
Members

Members

MembershipMembership:
Latest New UserLatest:MrPTSai
New TodayNew Today:0
New YesterdayNew Yesterday:0
User CountOverall:5234
People OnlinePeople Online:
VisitorsVisitors:38
MembersMembers:0
TotalTotal:38
Online NowOnline Now:

Ads

Copyright 2009 ActiveDir.org
Terms Of Use