Modifying security attributes on Exchange Server programmati

Amit Agrawal · Joined: 06 Aug 2007 Posts: 2

Hi,

Using the Exchange System Manager, I can choose the server
whose security attributes I wish to modify ( right click a
server, choose Properties, and select the "Security" tab).

How is it possible to do this programmatically? I tried
using the IADs interface with an LDAP string specifying
the server object, then got the SD using:
pADs->Get(CComBSTR("ntSecurityDescriptor"), &var);

Then I enumerate the ACL/ACEs, but I get a very different
ACL as compared to the one I pull up using the Exchange
System Manager! What am I doing wrong??

Any help is GREATLY appreciated!

Thanks & Best Regards,
Amit

Archived from group: microsoft>public>exchange2000>information>store

Tom Rizzo [MSFT] · Joined: 05 Aug 2007 Posts: 13

Take a look at the Exchange Security Module in the Exchange SDK. Exchange
has some ACLs that NT does not and orders them differently.

Tom

--
Looking for a good book on programming Exchange, Outlook, ADSI and
SharePoint? Check out http://www.microsoft.com/MSPress/books/5517.asp

This posting is provided "AS IS" with no warranties, and confers no rights.

"Amit Agrawal" wrote in message$9d84ca20$a001280a@phx.gbl...
> Hi,
>
> Using the Exchange System Manager, I can choose the server
> whose security attributes I wish to modify ( right click a
> server, choose Properties, and select the "Security" tab).
>
> How is it possible to do this programmatically? I tried
> using the IADs interface with an LDAP string specifying
> the server object, then got the SD using:
> pADs->Get(CComBSTR("ntSecurityDescriptor"), &var);
>
> Then I enumerate the ACL/ACEs, but I get a very different
> ACL as compared to the one I pull up using the Exchange
> System Manager! What am I doing wrong??
>
> Any help is GREATLY appreciated!
>
> Thanks & Best Regards,
> Amit

Amit Agrawal · Joined: 06 Aug 2007 Posts: 2

Hi,

I went through the ESM in the Exchange SDK but I couldn't
figure out how exactly should I manipulate the ACL for the
Exchange Server (not a folder/item in the store).
Specifically, I need to add "Full Control" permissions to
the "Domain Admins" Group that shows up in the "Security"
tab when I check the "Properties" for a server using the
Exchange System Manager.

As far as I understand, I can see the folder/item rights
using the sample code provided by the SDK but how
manipulate the ACLs for an entire server??

Thanks once again!!
Best Regards,
Amit Agrawal

>-----Original Message-----
>Take a look at the Exchange Security Module in the
Exchange SDK. Exchange
>has some ACLs that NT does not and orders them
differently.
>
>Tom
>
>--
>Looking for a good book on programming Exchange, Outlook,
ADSI and
>SharePoint? Check out
http://www.microsoft.com/MSPress/books/5517.asp
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>
>
>"Amit Agrawal" wrote in message
>$9d84ca20$a001280a@phx.gbl...
>> Hi,
>>
>> Using the Exchange System Manager, I can choose the
server
>> whose security attributes I wish to modify ( right
click a
>> server, choose Properties, and select the "Security"
tab).
>>
>> How is it possible to do this programmatically? I tried
>> using the IADs interface with an LDAP string specifying
>> the server object, then got the SD using:
>> pADs->Get(CComBSTR("ntSecurityDescriptor"), &var);
>>
>> Then I enumerate the ACL/ACEs, but I get a very
different
>> ACL as compared to the one I pull up using the Exchange
>> System Manager! What am I doing wrong??
>>
>> Any help is GREATLY appreciated!
>>
>> Thanks & Best Regards,
>> Amit
>
>
>.
>

Trap E-mails on Exchange server sent using outlook Dear All, I want to trap all e-mails on my Exchange server. My problem is that a message is sent using a MAPI client, such as Outlook , and are not trappable using OnArrival event Sink of Pls. suggest an alternative The M

[C#][Exchange] How it works? Hi, I try to use .NEt application with Exchange 2000 But I have problem. I do this example: I have an exception on: "", "", -1); The exception is: Provider cannot be found. It may not be properly

Exchange event sink I'm looking to make an event sink that will forward specific emails (by what's in the subject line) but without the original attachment. This sink would only apply to one user. I'm new at developing. If anyone could point me in the right direction, I'd

Creating Forms for Exchange How do we create forms for use in Exchange. I've got a client with Exchange and we want either to add on or replace the resource scheduling dialog (or whatever it is) for reserving conference rooms. We want to add information about the room, show a pictur

webdav = get the description of an event in Exchange Hi there, Im trying to display the description or message (subject, dtstart, dtend are all ok) of a calendar entry but I cannot find which schema it belongs to; Is it: or: or: urn:sc