Hi,
at a customer site there is a multidomain forest, one Schema master, sure :-).
The Default Security Permissions for the classschema object "user" is not an option.
In the Default Security Permission there are Domain-Admins and so on.
The Multi Domain Forest contains a lot of companies and is managed by an external Service Provider.
If we create new User Objects and Organizational Units for the datacenter,
every object is in full rights by the external Service Provider and we have to correct this.
For 30 000 Users and a lot of changes, also no Option.
I Know how to create a new classschema, but how can i add a new user in the domain
of the subforest that uses the new created class?
Got same subclass but commands like dsadd do not accept a classschema that i defined.
Is it possible to modifiy the dsadd function?
Got test Environment, so don´t hesitate to give me a hint.
I cannot find anything in mcse documentations, Internet and Tools like adsiedit do not have this Option...
Thanks for ideas!
Bye Mathias Rühn