VBScript: add group ACE entry to set group administrator
strObject = wscript.arguments(0)
‘CN=testuser,CN=Users,DC=t4evmdemo,DC=local
strPermissionUser = wscript.arguments(1)
‘T4EVMDEMOhelpdeskuser
‘example: cscript receiveas.vbs “CN=t4e_user,CN=users,DC=t4evmdemo,DC=local” “T4EVMDEMOHelpdeskA”
Set objSdUtil = GetObject(“LDAP://” & strObject & “”)
Set objSD = objSdUtil.Get(“ntSecurityDescriptor”)
Set objDACL = objSD.DiscretionaryACL
Set objAce = CreateObject(“AccessControlEntry”)
objAce.Trustee = strPermissionUser
objAce.AceFlags = 0
objAce.Flags = 0
objAce.AccessMask = 131132
objAce.AceType = 0
objDACL.AddAce objAce
objSD.DiscretionaryAcl = objDACL
objSDUtil.Put “ntSecurityDescriptor”, Array(objSD)
objSDUtil.SetInfo