Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 234
  • Last Modified:

What permissions does a group have.

I am working with WIN2k3 only. I just inherited this network and far too many people have far too many rights to do far too many things in AD.

I need a tool that will search my domain by group and user and tell me what permissions they have on what object. Mostly groups.
0
Farmer900
Asked:
Farmer900
  • 2
3 Solutions
 
AdamJurCommented:
You may want to use the DSGET and DSQUERY commands with either the USER or GROUP objects to determine membership.


To find what groups or users have permissions on file shares, you can use ACCESSENUM or SHAREENUM
you can check these out at sysinternals.com
0
 
KCTSCommented:
The free Microsoft Sysinternals tools from http://www.microsoft.com/technet/sysinternals/securityutilities.mspx?wt.svl=featured can be useful, especially

AccessChk - shows you the accesses the user or group you specify has to files, Registry keys or Windows services.
and
AccessEnum - shows you who has what access to directories, files and Registry keys on your systems.
and
ShareEnum - Scan file shares on your network and view their security settings.
 
0
 
LauraEHunterMVPCommented:
If you are looking for permissions within Active Directory itself, i.e. users who have been delegated permissions over user objects within an OU, etc., use dsrevoke:

http://www.google.co.uk/url?sa=t&ct=res&cd=1&url=http%3A%2F%2Fwww.microsoft.com%2Fdownloads%2Fdetails.aspx%3Ffamilyid%3D77744807-c403-4bda-b0e4-c2093b8d6383&ei=nK4PR6CJMZK2wQHG89TTCQ&usg=AFQjCNGIfabbn8TI-uTI2J3mH3RskGLEJA&sig2=lgOrMA7KM5mQIawfGHz0EQ
0
 
AdamJurCommented:
Farmer, have you figured out how to get this info yet?
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now