Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How do I grant rights using dsacls

Posted on 2010-09-22
1
Medium Priority
?
1,013 Views
Last Modified: 2012-05-10
This is the command I am using and the results.

C:\>dsacls cn={965545B4-2D20-4904-8E6A-B7878777CCE9},cn=policies,cn=system,dc=domain_name,dc=com /G "domain_name\Domain Admins"
The specified domain either does not exist or could not be contacted.

The command failed to complete successfully.

The domain_name is where I put our domain name however I keep getting the results specified domain either does not exist or could not be contacted.

I can ping my domain name.

Any ideas.
0
Comment
Question by:clearcap
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 31

Accepted Solution

by:
Justin Owens earned 2000 total points
ID: 33735847
Make sure you are using the right domain name.  When you look at ADUC, you will see at the root level your DC server name.  Under that you will see "Saved Queries" and your FQDN.  Your command must include what that has.  Let's say, for example, that your domain is mycompany.local.  Your command would be:

C:\>dsacls cn={965545B4-2D20-4904-8E6A-B7878777CCE9},cn=policies,cn=system,dc=mycompany,dc=local /G "domain_name\Domain Admins"

You can actually get EXACTLY what need to be there if you look at the Attribute Tab under the setting "distinguishedName".  The bolded "domain_name" above is actually the "Pre Windows 2000" name, and stored under the value "name" in the same attribute tab.

Justin
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

660 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question