RE: [ActiveDir] OU permissions for user object

2005-08-27 Thread Grillenmeier, Guido
sounds to me as if you've not set the permission to _inherit_ down to existing objects - check in the Advanced tab of the security editor (the tab that displays the permissions on your OU in ADUC) and see if your Full Control permission are set for User Objects (which will then automatically

Re: FW: [Fwd: RE: [ActiveDir] Password policy change]

2005-08-27 Thread Phil Renouf
Yes that enables the password change functionality through OWA, but I don't believe that will help this particular situation. When you set the User Must Change Password at Next Logon bit then logon to OWA I don't think OWA will dump you to a password change screen. That Password Change screen is on

[ActiveDir] Binding OS X

2005-08-27 Thread Clingaman, Bruce
Title: Binding OS X Recently, I have been unable to bind my OS X 3.8 and later clients. I was having no problems before. I can bind the same Mac to our other domain. When attempting it gives "Unknow error." The console says LDAP server mappings error. What diagnostics can I run on the DC to

RE: [Fwd: RE: [ActiveDir] Password policy change]

2005-08-27 Thread Ken Schaefer
The original Password Change functionality used HTRs, and there was a buffer overflow vulnerability in the ISAPI Extension that handled HTRs (ism.dll). There's a download on the MS Downloads page that substitutes ASP pages: http://support.microsoft.com/?id=331834 Change password functionality repl

FW: [Fwd: RE: [ActiveDir] Password policy change]

2005-08-27 Thread joe
>From a "shy" lurker MVP It appears it is something you can enable. It isn't strictly part of OWA but the old IIS Password change tool. I recall there being issues with that tool and that is why they stopped enabling it by default but can't recall what they were this late at night or this ear

RE: [ActiveDir] Permissions for a user to add users to a group

2005-08-27 Thread joe
It means the manager can add or remove DNs to the member attribute of the group. So they will be able to add or remove members of the group. They won't actually be able to add/remove users from AD with just those rights. ADUC can be used, as can a script or anything else that modifies the member a