Some of the object properties do not appear in the user interface. How can I access them to set permissions?
Not every property of an object is listed in the Active Directory Users and Computers interface. The number of properties is quite large so the interface only displays those that are commonly used for controlling access. This makes the list easier to manage.The list of filtered object types and properties is kept in the file, %systemroot%\System32\Dssec.datYou can modify the behavior of the filter by changing the values associated with the properties. For example, if you wanted to delegate the right to unlock accounts you can do this by changing the value of the lockoutTime entry in the [user] section of the file from lockoutTime=7 to lockoutTime=0.You have the following choices to specify values:Property=7: The property is not included.Property=6: “Read property” is included. Property=5: “Write property” is included.Property=0: Both “Read property” and “Write property” are included.The property is not included in DSSec.Dat: Both “Read property” and “Write property” are included.You mu
