Page 1 of 1 1
Topic Options
#81297 - 2002-10-25 05:34 PM Win9x, RPC & AD Perms
scottietaz Offline
Lurker

Registered: 2002-10-23
Posts: 4
When using specific macros/functions in Win9x such as:

@FULLNAME
@RSERVER
InGroup()
...I haven't tested beyond this.

KiXtart bombs out completely if the user doesn't have Read permissions on the entire Active Directory. (Read on AD = go to the root of the domain in AD users & computers and check to see if everyone or said group has "Read" security access "on this object and children objects".)

We removed the default setting of Pre-Windows 2000 Compatible Access group's read privileges. We don't want just anyone to be able to read a user's attributes. So certain users can read any object in the AD domain and others can't. Those that can read -- KiXtart works great. Those that can't read -- KiXtart completely stops processing the script and just abuptly aborts as soon as I try to access one those macros/functions.

The RPC server will log an error in the application log:

Event ID: 4099
Runtime info : (Error : Access is denied. (0x5/5)
GetInfo() : NetUserGetInfo on : \\MyDC failed for MyDomain\MyUser.)

Suguestions:

1) Make KiXtart more robust so it won't bomb out. Also set @ERROR to acess denied.

2) Don't use WinNT4 system calls--use ADO to find the user and use ADSI get the displayname, etc. This way you only need List on the directory and Read on self.

{edit by moderator}
This was discussed in the thread Topic: RPC and Active Directory Perms

[ 25. October 2002, 18:03: Message edited by: LLigetfa ]

Top
#81298 - 2002-10-25 09:47 PM Re: Win9x, RPC & AD Perms
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
as addition (checked the other topic too)...

the latest, don't use nt-system calls?
how we are going to work with systems on nt-domain (pure or mixed) without adsi?

to separate AD and older, the kix exe size should increase a lot...
_________________________
!

download KiXnet

Top
Page 1 of 1 1


Moderator:  Lonkero, ShaneEP, Jochen, Radimus, Glenn Barnas, Allen, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 2220 anonymous users online.
Newest Members
Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.052 seconds in which 0.027 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org