Quantcast
Viewing all articles
Browse latest Browse all 31638

AD Schema: Creating a custom controlAccessRight / PropertySet

Hi,

I tried to find some information about how to create a custom property set but without much luck. All I can find is some information about the attributes that are member of the built-in sets and that an attribute can memember of only one set.

These are my findings so far and maybe someone can confirm or correct my Information:

-> Property sets are stored on CN=Extended-Rights, CN=Configuration, dc=mydomain

-> The objectClass is controlAccessRight

-> The appliesTo refers to the schemaIDGUID of the Schema classes the property set applies to

-> The rightsGUID is some GUID I will defined for a custom property set

-> All attributes that are possible members of the classes referenced by appliesTo and that should become a member of the propertyset must have their attributeSecurityGUID set to the property sets rightsGUID.

The controlAccessRight class schema requires an Attribute called validAccesses. The existing property sets seem to have the value 48 in common. Does anyone know the meaning of this value?

Thanks,

Marcus


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>