Windows Administration Resource Kit: Productivity Solutions for IT Professionals

5-5: Assign and Revoke Permissions with Dsacls

Solution overview

Type of solution	Guidance and command-line scripts
Features and tools	Dsacls
Solution summary	Leverage Dsacls to manage the delegation of administrative tasks in Active Directory.
Benefits	Understanding the use of Dsacls allows you to build scripts to apply delegation, as discussed in 5-7: Role-Based Management of Active Directory Delegation.

Introduction

In the previous solution, I introduced Dsacls, a command-line tool that enables the reporting and revocation of permissions on Active Directory objects. Dsacls is even more useful for applying Active Directory permissions. In this solution, I walk you through learning the most important switches and uses of the Dsacls command. I also present ...