Active Directory object permissions appear to duplicate other permissions in Windows Server 2003 (884117)
The information in this article applies to:
- Microsoft Windows Server 2003, Standard Edition
- Microsoft Windows Server 2003, Enterprise Edition
- Microsoft Windows Server 2003, 64-Bit Enterprise Edition
SYMPTOMSOn a Microsoft Windows Server 2003-based computer, when you use the ADSI Edit utility or use Active Directory Users and Computers to view special permissions for objects in the Active Directory directory service, you see permissions that appear to duplicate other permissions. The following permissions are listed in the Permissions list on the Properties tab of the Permission Entry for ObjectName dialog box: - Read name
- Write name
- Read Name
- Write Name
The permissions that are listed differ only by the capitalization of one character in the name. The difference between the permissions is not clear. CAUSEThe permissions that appear to duplicate other permissions represent permissions for different properties of an attribute. A permission with a lowercase "n" in its name applies to the relative distinguished name of the attribute. A permission with an uppercase "N" in its name applies to the common name (CN) of the attribute.STATUSMicrosoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Modification Type: | Major | Last Reviewed: | 9/10/2004 |
---|
Keywords: | kbwinservds kbActiveDirectory kbprb kbpending kbBug kbtshoot KB884117 kbAudITPRO |
---|
|