Had a strange behaviour while editing some AD-Objects with a service account. Some objects were editable and some werde not…
I found some differences in the ACL of the objects – some objects applied inherited rights while others didn’t.
I was able to compare the acl entries with this tool:
dsacls "\\ADSERVER\CN=Doe John,OU=Some OU,OU=Some ohter OU,DC=Domain,DC=LOCAL"
Piping the output to a textfile and compare the textfiles, using windiff for instance.
| Cookie | Dauer | Beschreibung |
|---|---|---|
| cookielawinfo-checbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
| cookielawinfo-checbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
| cookielawinfo-checbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. |
| cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
| cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |