Solved

Look up which servers each user on a domain can access

Posted on 2009-04-09
7
281 Views
Last Modified: 2013-12-24
To be more specific, I have a list of developrs in my company. I need to know which servers each developer (user) has access to on the domain(s) and what type of access they have on the server. I need to know if they have access based on a security group in their AD profile and if they have access because they have been added individually.

I am thinking that I need to search the local groups on every server on the domain(s) for the user's AD account and for a security group in the user's AD account. I have never heard of this and I want some suggestions on how to do this. Please keep in mind that I am very new to this type of work. If you suggest scripting, I have only taught myself VBScript and I am still new to it. Also, if you suggest an application, please keep the price in mind. Now, I understand there may be some better options than VBScripting or using another vendor. Although I am hesitant, I am willing to look into those options as well.
0
Comment
Question by:reason4xistence
  • 3
  • 2
7 Comments
 
LVL 17

Expert Comment

by:Nik
ID: 24109816
It can be really hard to found that out if you don't have any documentation for your file/system access.
How many servers are we talking about?

You can connect via Computer Management (right click on my computer --> connect to another PC) and check the local users that way.

You should also check AD group membership for each user and see their access levels to various folders.

As I said, it's a bit messy if you haven't documented this at start.
0
 

Author Comment

by:reason4xistence
ID: 24109876
Yikes! That was not what I was hoping to hear. I am talking about hundreds of servers and thousands of security groups. If I could start creating documentation that would be great. But documentation was not done at the start. This is an impossible task to do manually as you suggested because of the volume of servers and security groups. I was hoping an application was already created to do this task.
0
 
LVL 17

Expert Comment

by:Nik
ID: 24109905
It is probably possible to do it via VB script, but unfortunately I can't help you with that.
We have around 30 domain controllers and every single folder access is documented.
I wish I can help you more bud, 'cause this is a really big task to do :(

I'll try to google and ask my colleagues for any ideas..
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 

Author Comment

by:reason4xistence
ID: 24110090
Thanks!
0
 
LVL 2

Accepted Solution

by:
Curtiss earned 500 total points
ID: 24120863
check out a product called Hyena; i think sysinterals makes it? pretty robust tool for exporting local groups, domain groups, share and folder permissions, etc.
0
 

Author Comment

by:reason4xistence
ID: 24196857
I will look into Hyena. Thanks.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question