search for: sddls

...a/raw > It seems to do something. But I have no idea what :-) > > > Regards, > Marc FYI Marc, It is allowing 'Domain Computers' access to "CN=demo01,CN=Users,DC=samdom,DC=example,DC=com", the container will inherit ACES and 'Domain Computers' can read the sddls, list children and read control. :-) See here: https://msdn.microsoft.com/en-gb/library/windows/desktop/aa374928%28v=vs.85%29.aspx and here: https://msdn.microsoft.com/en-gb/library/windows/desktop/aa379602%28v=vs.85%29.aspx

...sericorde.fr> wrote: > >> Thanks Rowland for once again, an analysis that looks good. >> >> To you, >> is there a workaround at this stage ? > Not from myself,it has been years since I looked into this and only > really got has far as mapping the sysvol directory SDDLs on a 2012R2 > DC. It was at this point that I was basically told my python was crap > (it wasn't said in that term, but it came across to me in that way), so > I just gave up. > >> For others, let say someone that >> had dev this part, any chance to see a change in the n...

I need to create a couple of OUs under Users to separate my internal users from my external users that have LDAP backed accounts so I can put ACLs over the external users so I can limit what they can see on the tree. What options do I have to create the OUs and the ACLs in a Samba4 AD-DC domain?