Active Directory Object ACL or ACEs - how to display them using a command line tool?


I'm facing slightly uncommon problem. I found some example output and I'd like to be able to get the same on different objects. I guess that the following is ACEs entries of some AD object:
"John Doe";Grant; Create, Modify, Delete; Object-Class User

Can anybody help me to find a command which produces this type of output? Maybe I'm completely wrong, but as far as I remember there was this kind of program on W2003 - maybe in Support Tools or Resource Kit, but I'm doing that on W2008. Nevermind that, if you help me to find the command which does that sort of output I'll find some workaround for W2008.

Many thanks
LVL 13
Who is Participating?
martin_babarikAuthor Commented:
Thanks a lot Laura, you saved my day :-)
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.