O'Reilly logo

Active Directory Cookbook by Robbie Allen

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

14.13. Resetting an Object’s ACL to the Default Defined in the Schema

Problem

You want to reset an object’s ACL to the one defined in the schema for the object’s object class.

Solution

Using a graphical user interface

Tip

This is available only in the Windows Server 2003 version of the ACL Editor.

  1. Open the ACL Editor. You can do this by viewing the properties of an object (right-click on the object and select Properties) with a tool, such as Active Directory Users and Computers (ADUC) or ADSI Edit. Select the Security tab. To see the Security tab with ADUC, you must select View Advanced Features from the menu.

  2. Click the Advanced button.

  3. Click the Default button.

  4. Click OK twice.

Using a command-line interface

> dsacls <ObjectDN> /s

Discussion

For more on the default security descriptor, see Recipe 14.11.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required