Re: Active Directory authentication / authorisation

Max Vit <mvit@xxxxxxxxxxxxx> wrote:

I have been toying with the idea of having an Active Directory
authentication / authorisation functionality in MS Access; but there
is not much useful info around.

Here's a dump of everything I found a year or go as is in OneNote. You'll have to
figure out which of these links are appropriate to your scenario. I built a tool
that could create folders and subfrlders by job with different permissions for the
subfolders which varied by group.

nternet resources
Programmatically Set NTFS File System Folder Permissions

Enumerating Local Groups and Descriptions with NetLocalGroupEnum
Pasted from <http://vbnet.mvps.org/code/network/netlocalgroupenumdesc.htm>

Enumerating Members of a Group with NetLocalGroupGetMembers
Pasted from <http://vbnet.mvps.org/code/network/netgocalgroupgetmembers.htm>

Xcacls.exe
Pasted from <http://support.microsoft.com/default.aspx?scid=KB;EN-US;825751>

How To Use High-Level Access Control APIs from Visual Basic
Pasted from <http://support.microsoft.com/default.aspx?scid=kb;EN-US;295004>


http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/iadsgroup.asp

Following might do everything I want.
http://groups.google.ca/groups?hl=en&lr=lang_en&ie=UTF-8&safe=off&threadm=033401c30554%24deccc7a0%24a401280a%40phx.gbl&rnum=3&prev=/groups%3Fhl%3Den%26ie%3DUTF-8%26safe%3Doff%26q%3Dadsi%2Bsearch%2Borganizationalunit%26spell%3D1

ldap

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnanchor/html/anch_activediradsi.asp

Active Directory Service Interfaces Quick-start Tutorials
Pasted from
<http://msdn.microsoft.com/library/en-us/adsi/adsi/adsi_quick-start_tutorials.asp?frame=true>


IADsAccessControlEntry
Pasted from
<http://msdn.microsoft.com/library/en-us/adsi/adsi/iadsaccesscontrolentry.asp?frame=true>



An ADSI Primer, Part 11: More on Scripting Permissions and Auditing (Windows
Scripting though)
Pasted from
<http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/7456/7456.html>


HOWTO: Use ADsSecurity.dll to Remotely Add Local Account ACEs to an NTFS File
Pasted from <http://support.microsoft.com/default.aspx?scid=kb;en-us;Q285998>

How To Use ADSI to Set Automatic Inheritance of File/Folder Permissions
Pasted from <http://support.microsoft.com/kb/266461/EN-US/>

http://groups.google.ca/groups?q=group+dacl+security+permissions+group:*vb*&hl=en&lr=lang_en&safe=off&selm=3A42D078.3ED7F611%40hotmail.com&rnum=10

Various constants are at the following:
http://www.serverwatch.com/tutorials/article.php/1476721

Security and Access Rights
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/fileio/base/file_security_and_access_rights.asp


How To Use ADSI to Set Automatic Inheritance of File/Folder Permissions
Pasted from <http://support.microsoft.com/default.aspx?scid=kb;en-us;266461>
VBScript recursive changing of subfolders


IADsAccessControlEntry Property Methods
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/iadsaccesscontrolentry_property_methods.asp


HOWTO: Use ADsSecurity.dll to Remotely Add Local Account ACEs to an NTFS File
Pasted from <http://support.microsoft.com/default.aspx?scid=kb;en-us;Q285998>

How To Use ADsSecurity.dll to Add an Access Control Entry to an NTFS Folder
Pasted from <http://support.microsoft.com/default.aspx?scid=kb;en-us;Q279682>

--
Tony Toews, Microsoft Access MVP
Please respond only in the newsgroups so that others can
read the entire thread of messages.
Microsoft Access Links, Hints, Tips & Accounting Systems at
http://www.granite.ab.ca/accsmstr.htm
Tony's Microsoft Access Blog - http://msmvps.com/blogs/access/
.

Relevant Pages

  • Re: Access 2003 and Active Directory
    ... Programmatically Set NTFS File System Folder Permissions ... How To Use ADSI to Set Automatic Inheritance of File/Folder ... Tony Toews, Microsoft Access MVP ...
    (microsoft.public.access.modulesdaovba)
  • Re: Access 2003 and Active Directory
    ... I did some work with Active Directory a while back. ... Programmatically Set NTFS File System Folder Permissions ... Tony Toews, Microsoft Access MVP ...
    (microsoft.public.access.modulesdaovba)
  • Re: Windows shared folder not respecting NTFS filesystem permissions?
    ... security permissions will "always" superceed NTFS file permissions with the ... to control the folder access. ... The Basics of ACL Inheritance: ... Small Business Server concerning NTFS file permissions and shared ...
    (microsoft.public.windows.server.sbs)
  • Windows shared folder not respecting NTFS filesystem permissions?
    ... I have discovered a quite disturbing issue with our Windows Server 2003 Small Business Server concerning NTFS file permissions and shared folders. ... Mysteriously, on our SBS 2003 install, the underlying NTFS ACL seems to be being ignored, and once a share ACL gives write access to a folder, it gives write access to *every* file, even if the NTFS file permissions are explicitly set to provide read access only. ...
    (microsoft.public.windows.server.sbs)
  • Re: User Rights at Client Seem to Vary
    ... > Herb thanks for the educating reply! ... Or just first VIEWING the permissions and perhaps ... Also, as a Novell guy, notice that SHARE permissions and ... NTFS FILE permissions are distinct -- they interact when a user ...
    (microsoft.public.windows.server.active_directory)