Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

View list of Users Delegated Right's in AD

Posted on 2009-04-01
5
291 Views
Last Modified: 2012-05-06
Right now I'm running a Windows 2000 AD domain. Is there any way for me to get a list or easily see which groups / users have access or permission to do "what" in the domain or OU. For example I want to know what permission GroupA has for the domain ora ll sub OU;s like password reset etc...
0
Comment
Question by:compdigit44
  • 2
  • 2
5 Comments
 
LVL 18

Expert Comment

by:Americom
ID: 24041315
Right click on the OU and select properties and security tab, to see more click on Advanced.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 24041420
0
 
LVL 18

Expert Comment

by:Americom
ID: 24041780
Or if you have the $ to spend, use Active Administrator from ScriptLogic.
This software allow you to manage AD including friendly display of Active Directory security, monitor activities of your AD event as to who create/add/delete AD object etc. It also have backup and restore AD objects instantly. http://www.scriptlogic.com/products/activeadmin/

Hi Mike.
0
 
LVL 19

Author Comment

by:compdigit44
ID: 24041969
I'm trying the dsrevoke command now...since I do not have any $$$$$$$$$ in my budget right now...
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24062144
Most of us don't have money in our budgets right now...so you are not alone
Hopefully things pick up in the next few years :)
Thanks
Mike
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question