question

MateuszBben-7176 avatar image
0 Votes"
MateuszBben-7176 asked DSPatrick edited

Delegate permission in Active Directory

Hello everyone,

I try write a script which delegate permission on OU in AD, but when I try add both below permission, every time I get on ACL only generic all permission. It looks like they have higher priority than create, delete. What will be cause in this case and how I can fix it?

$ace = New-Object System.DirectoryServices.ActiveDirectoryAccessRule $sid, "CreateChild, DeleteChild", "Allow", $Groups, "All"
$ace2 = New-Object System.DirectoryServices.ActiveDirectoryAccessRule $sid, "GenericAll", "Allow", "Descendents", $Groups

Regards

windows-server-powershell
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

0 Answers