INFO: The Security Context for Using IADsTools Methods (301921)


The information in this article applies to:

  • Microsoft Windows 2000 Server SP2
  • Microsoft Windows 2000 Advanced Server SP2
  • Microsoft Windows 2000 Professional SP2
This article was previously published under Q301921

SUMMARY

This article lists the functions that are wrapped by the IADsTools interface, and lists the required security context to use them.

MORE INFORMATION

Iadstools.dll is a dynamic-link library (DLL) that you can use to write Microsoft Visual Basic scripts (or to create your own programs) to extract specific types of data from Active Directory, and to use the new application programming interface (API) calls that are available in Windows 2000. For example, Iadstools.dll includes functions that make it easy to script replication between domain controllers with just a few lines of Microsoft Visual Basic Scripting Edition (VBScript) code.

Iadstools.dll is installed with the Windows 2000 Support Tools package. You can install this package from the Support\Tools folder on the Windows 2000 Server or Professional CD-ROM. For a complete list of all of the functions that are available in Iadstools.dll, see the Iadstools.doc file that is installed with the Windows 2000 Support Tools package.

Functions That Are Exposed by the IADsTools VB COM Wrapper

Directory Service Functions

DsGetDcName
DsBind
DsBindWithCred
DsReplicaSync
DsReplicaSyncAll
DsMakePasswordCrendentials
GetPrivateProfileString
DsReplicaConsistencyCheck
DsReplicaGetInfo

Performance Data Functions

PdhVbGetOneCounterPath
PdhVbCreateCounterPathList
PdhVbGetCounterPathFromList
PdhOpenQuery
PdhCloseQuery
PdhVbAddCounter
PdhCollectQueryData
PdhVbIsGoodStatus
PdhVbGetDoubleCounterValue

Security Context and Permissions

There are several registry functions that permit the tool to read the registry information, and there are a few event-related keys that permit the process counters to work properly.

FunctionSecurity context
Directory Service functionsNo special rights
DsBindUses current process credentials
DsBindWithCred Uses supplied authentication structure
DsReplicaSyncSee MSDN for all DsReplica calls
DsReplicaSyncAllSee MSDN for all DsReplica calls
DsMakePasswordCrendentialsNo special rights
GetPrivateProfileStringDepends on the key and the permissions granted
DsReplicaConsistencyCheckSee MSDN for all DsReplica calls
DsReplicaGetInfoSee MSDN for all DsReplica calls

FunctionRequired permissions
PdhVbGetOneCounterPathRequires administrative rights
PdhVbCreateCounterPathListRequires administrative rights
PdhVbGetCounterPathFromListRequires administrative rights
PdhOpenQuery Requires administrative rights
PdhCloseQueryRequires administrative rights
PdhVbAddCounterRequires administrative rights
PdhCollectQueryDataRequires administrative rights
PdhVbIsGoodStatusRequires administrative rights
PdhVbGetDoubleCounterValueRequires administrative rights

Registry Keys

Registry keys are controled by the access control lists (ACLs) on those keys.

REFERENCES

For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base:

305832 Memory Leak with the GetDirectPartnersEx() Function in Iadstools

232072 Initiating Replication Between Active Directory Direct Replication Partners

246926 Folder Listing of the Support Tools Included in Windows 2000

Modification Type:MajorLast Reviewed:2/12/2004
Keywords:kbDSWADSI2003Swept kbinfo KB301921 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.