Solved

Tool that exist where you can easily find out what user has for a shared  access to witch groups he belongs too

Posted on 2006-07-10
9
393 Views
Last Modified: 2010-03-18
Hello, I know there is a command out there or a tool that exist where you can easily find out what user has access to witch groups I just can remember it.. And also for shared drive who has what access to witch drive and their access level. Id like to know how to do it.

Thank you much
0
Comment
Question by:CareConnect
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
  • +1
9 Comments
 
LVL 26

Expert Comment

by:Pber
ID: 17075883
Check out this link:
http://www.experts-exchange.com/Security/Win_Security/Q_21562911.html?query=group+membership+command+line&clearTAFilter=true

Also to dump group memberships you can use:

dsquery user -name youruser|dsget user -memberof

As far as seeing who has access to shares you can try Enterprise Security Reporter by Scriptlogic:
http://www.scriptlogic.com/products/enterprisesecurityreporter/
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 17076005
A very nice little, free, utility to accomplish both of these is dumpsec. It allows you to create custom reporst. They can also be exported if you wanted to import them to another application or spreadsheet.
http://www.somarsoft.com/
0
 

Author Comment

by:CareConnect
ID: 17082226
That is great the tool.. but i am a litle scheptical inputting this "free tool" on a Domain!
how ever the following command is great -->
---
Open a command prompt, enter
net group /domain
This will enumerate the global groups in your domain.
To retrieve the members of a group, enter
net group GroupName /domain
(do NOT replace "/domain" with your domain name!)
To create a file that you can then print, simply redirect the output by adding ">SomeFileName.txt"
Works without domain admin permissions.
---
But I have over 25 groups and i have to enter each individual groups to find out who is a memeber of and it is time consuming. Is there a switch that i  can put to the command only once and then all groups and every users member of those groups are showing at once?
Thank you
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 77

Accepted Solution

by:
Rob Williams earned 400 total points
ID: 17083586
CareConnect, should you want to use DumpSec it is a well recognized tool used by many admins, on this forum and elsewhere......Just a vote of confidence. <G>
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17087936
not sure if this helps or not

http://www.systemtools.com/hyena/user.htm
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 17090078
Welcome back James !! Enjoy the vacation ?

Hyena is the paid version of Dumpsec, suggested above, but does offer a lot more.
--Rob
0
 

Author Comment

by:CareConnect
ID: 17090667
Thank you RobWill! very good little tool.. and will become really usefull too!!
Cheers!
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 17090792
Thanks CareConnect. Yes it's a great little tool. Price is right too !  :-)
--Rob
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17095377
Hey Rob! Vacation was awesome, i shall send over some pics today if i get enough time - damn workload has tripled since i have got back.....

Didn't realise Hyena was Dumpsec...nice!

Cheers Fellas and well done Rob!
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
Resolve DNS query failed errors for Exchange
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question