Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Some of the object properties do not appear in the user interface. How can I access them to set permissions?

0
Posted

Some of the object properties do not appear in the user interface. How can I access them to set permissions?

0

Not every property of an object is listed in the Active Directory Users and Computers interface. The number of properties is quite large so the interface only displays those that are commonly used for controlling access. This makes the list easier to manage.The list of filtered object types and properties is kept in the file, %systemroot%\System32\Dssec.datYou can modify the behavior of the filter by changing the values associated with the properties. For example, if you wanted to delegate the right to unlock accounts you can do this by changing the value of the lockoutTime entry in the [user] section of the file from lockoutTime=7 to lockoutTime=0.You have the following choices to specify values:Property=7: The property is not included.Property=6: “Read property” is included. Property=5: “Write property” is included.Property=0: Both “Read property” and “Write property” are included.The property is not included in DSSec.Dat: Both “Read property” and “Write property” are included.You mu

Related Questions

Thanksgiving questions

*Sadly, we had to bring back ads too. Hopefully more targeted.