Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

How do I grant rights using dsacls

Posted on 2010-09-22
1
968 Views
Last Modified: 2012-05-10
This is the command I am using and the results.

C:\>dsacls cn={965545B4-2D20-4904-8E6A-B7878777CCE9},cn=policies,cn=system,dc=domain_name,dc=com /G "domain_name\Domain Admins"
The specified domain either does not exist or could not be contacted.

The command failed to complete successfully.

The domain_name is where I put our domain name however I keep getting the results specified domain either does not exist or could not be contacted.

I can ping my domain name.

Any ideas.
0
Comment
Question by:clearcap
1 Comment
 
LVL 31

Accepted Solution

by:
Justin Owens earned 500 total points
ID: 33735847
Make sure you are using the right domain name.  When you look at ADUC, you will see at the root level your DC server name.  Under that you will see "Saved Queries" and your FQDN.  Your command must include what that has.  Let's say, for example, that your domain is mycompany.local.  Your command would be:

C:\>dsacls cn={965545B4-2D20-4904-8E6A-B7878777CCE9},cn=policies,cn=system,dc=mycompany,dc=local /G "domain_name\Domain Admins"

You can actually get EXACTLY what need to be there if you look at the Attribute Tab under the setting "distinguishedName".  The bolded "domain_name" above is actually the "Pre Windows 2000" name, and stored under the value "name" in the same attribute tab.

Justin
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This article runs through the process of deploying a single EXE application selectively to a group of user.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

791 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question