Quantcast
Viewing all articles
Browse latest Browse all 12072

Setting ACE for User object with Inheritance Type "This object and all its descendants"

When creating and setting an ACE for User object, if i set the object_type to "{bf967aba-0de6-11d0-a285-00aa003049e2}", it works properly for "This Object Only" (AccessFlag 0) inheritance type. But if i set the same for "This Object and all its descendants" (AccessFlag 2), the ACE is created with inheritance type "All User Descendants". If i does not pass the GUID of the domain user ({bf967aba-0de6-11d0-a285-00aa003049e2}), few permissions like "Create ms-net-ieee-80211-Group Policy Object" are not set. 

- Santron Manibharathi.


Viewing all articles
Browse latest Browse all 12072

Trending Articles