Hi, I want to know how to Read CREATOR OWNER special permission for computer class schema using powershell commands I changed the computer object schema in the AD, I did as shown below. I changed the default schema for CREATOR OWNER->Special. uncheck the "All Extended Rights" Open the Active Directory Schema snap-in. In the left pane, browse to the class you want to modify. Right-click on it and select Properties. Select the Default Security tab. Use the ACL Editor to change the ACL. Click OK. So now if I create computer object in the ADUC by login as a domain User(who is having rights to create computer object), it creates a computer object and sets its default set values. I want to know what is happening at background when computer objects creates and how that default ACLs and permissions are applied. I am writing a powershell script when I am able to create new-adcomputer but want to know what opther commands I need to execute to set default permissions set @schema level for creator owner.

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Read CREATOR OWNER special permission for computer class schema using powershell commands

HarryBlor over 7 years ago

Hi,

I want to know how to Read CREATOR OWNER special permission for computer class schema using powershell commands

I changed the computer object schema in the AD,

I did as shown below.

I changed the default schema for CREATOR OWNER->Special.

uncheck the "All Extended Rights"

Open the Active Directory Schema snap-in.
In the left pane, browse to the class you want to modify.
Right-click on it and select Properties.
Select the Default Security tab.
Use the ACL Editor to change the ACL.
Click OK.

So now if I create computer object in the ADUC by login as a domain User(who is having rights to create computer object), it creates a computer object and sets its default set values.

I want to know what is happening at background when computer objects creates and how that default ACLs and permissions are applied.

I am writing a powershell script when I am able to create new-adcomputer but want to know what opther commands I need to execute to set default permissions set @schema level for creator owner.