Discussion:
How to export AD object ACL
(too old to reply)
net_admin
2008-01-25 12:18:03 UTC
Permalink
Hi there,

I'm about to change the ACL of a group and I'd like to export this info just
in case I need to put it back.

Does anyone know a tool that would do it?


Regards,
--
NetAdmin <São Paulo, BR>
Jorge Silva
2008-01-25 16:07:03 UTC
Permalink
Hi
Assuming that you're talking about the Group membership you can use ldifde
or CSVDE or others you can search at MS Script center for different
scenarios.
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
Jorge de Almeida Pinto [MVP - DS]
2008-01-26 22:12:31 UTC
Permalink
you can use DSACLS and ADFIND to export the DACL from the object..

importing is not possible using either tool. you would need to configure the
DACL manually until it is the same as the export
--
Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Post by Jorge Silva
Hi
Assuming that you're talking about the Group membership you can use ldifde
or CSVDE or others you can search at MS Script center for different
scenarios.
--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE, MVP Directory Services
net_admin
2008-01-28 11:59:00 UTC
Permalink
DSACLS did the job, thanks a lot!

C:\>dsacls cn=test1,dc=mydomain,dc=net
--
NetAdmin <São Paulo, BR>
Post by Jorge de Almeida Pinto [MVP - DS]
you can use DSACLS and ADFIND to export the DACL from the object..
importing is not possible using either tool. you would need to configure the
DACL manually until it is the same as the export
--
Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto # MVP Windows Server - Directory Services
BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
Post by Jorge Silva
Hi
Assuming that you're talking about the Group membership you can use ldifde
or CSVDE or others you can search at MS Script center for different
scenarios.
--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE, MVP Directory Services
Loading...