ds: dsacls is driving me crazy!
here's a little background. i'm trying to delegate permissions for create/delete computer objects on a given ou. i get back this nonsensical response on a command i know i've issued before but can't seem to make it work! seen this before? here's the command:
dsacls "OU=Computers,OU=General,DC=Company,DC=com" /G "Company\SupportGuy:CCDC;Computer"
this is the response:
No GUID Found for Computer The parameter is incorrect. The command failed to complete successfully.apparently case does matter in some cases (intended). capitalizing Computer causes the output to fail. why? i guess dsacls is case sensitive. it's looking for an object called Computer. switching it to lowercase computer works just fine.
Check out this link:
ReplyDeleteDSACLS Command Syntax Snippets
http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3ADPerm/572177fd-7711-4e85-9d45-f1f854c08839.mspx?mfr=true
It helped me.
By the way nice blog.