• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1045
  • Last Modified:

How do I grant rights using dsacls

This is the command I am using and the results.

C:\>dsacls cn={965545B4-2D20-4904-8E6A-B7878777CCE9},cn=policies,cn=system,dc=domain_name,dc=com /G "domain_name\Domain Admins"
The specified domain either does not exist or could not be contacted.

The command failed to complete successfully.

The domain_name is where I put our domain name however I keep getting the results specified domain either does not exist or could not be contacted.

I can ping my domain name.

Any ideas.
0
clearcap
Asked:
clearcap
1 Solution
 
Justin OwensITIL Problem ManagerCommented:
Make sure you are using the right domain name.  When you look at ADUC, you will see at the root level your DC server name.  Under that you will see "Saved Queries" and your FQDN.  Your command must include what that has.  Let's say, for example, that your domain is mycompany.local.  Your command would be:

C:\>dsacls cn={965545B4-2D20-4904-8E6A-B7878777CCE9},cn=policies,cn=system,dc=mycompany,dc=local /G "domain_name\Domain Admins"

You can actually get EXACTLY what need to be there if you look at the Attribute Tab under the setting "distinguishedName".  The bolded "domain_name" above is actually the "Pre Windows 2000" name, and stored under the value "name" in the same attribute tab.

Justin
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now