ADSI Permissions

[togatown]

Can you use powershell to set permissions on an AD object?

I want to add a group and set "deny read" and "deny open address list" permissions on the default global address list for the group.

I can access it and know how to set properties and commit them, I just don't know how to add a group to the permission and set permissions.

$cn = [ADSI]”LDAP://CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists Container,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mydomain,DC=local"

Thanks

 

[crobin1]

You might check out Jeffery Hicks' e-book, "Managing Active Directory with Windows PowerShell". Available at

http://www.quest.com/powershellbook.

There's a chapter on groups as well as chapter on AD permissions that might help. He covers both native methods as well as Quest's AD cmdlets.

 

[togatown]

Thanks.