right - thanks for the clarification
Dean
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean
WellsSent: Donnerstag, 15. Dezember 2005 03:18To: Send -
AD mailing listSubject: RE: [ActiveDir] dsHeuristics and list object
access mode
To
clarify, note the syntax
dsHeuristics can be used to control whether the 'list contents' ACE has an affect. So if the attribute is set to 001 then this means that if you haven't got list contents permission on a container then you can't see what's under it. Whereas if dsHeuristics is the equivalent of 000 then list
: [ActiveDir] dsHeuristics and list object access mode
dsHeuristics can be used to control whether the 'list contents' ACE has an
affect. So if the attribute is set to 001 then this means that if you haven't
got list contents permission on a container then you can't see what's under it.
Whereas
Aha. It is down to shoddy cut and pastes then. Sorted.The 3rd bit controls the "list object"behaviour not "list contents". The former is only available to use in an ACE if the 3rd bit is set to 1. If it's set to 0 or "not set" then "list contents" is available but not "list object".This
@mail.activedir.orgSubject: [ActiveDir] dsHeuristics and
list object access mode
dsHeuristics can be used to control whether the 'list
contents' ACE has an affect. So if the attribute is set to 001 then this means
that if you haven't got list contents permission on a container then you can't
see what's under
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier,
GuidoSent: Wednesday, December 14, 2005 2:40 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] dsHeuristics and
list object access mode
The DSheuristics setting activates or de-activates the
List Object