Solved

Printing Permissions Windows server 2003

Posted on 2009-04-14
1
254 Views
Last Modified: 2012-05-06
Is there any way that I can print my current users permissions?
Is it possible to do it?
I need to change some user permissions under my Ad, but I still need to view the current permissions.
My problem is that By default each one of my domain users is become an Admin Users, I dont know waywhy somebody told me that the first Administrator in this company by default creates a policy that makes everybody Domain Admins (really bad haaa).hamata)so I need to test the permissions before I'm changing something. I'm just thinking maybe there is a way to print this permission, only to camper; There are only 10 users under our ACTIVE DIRECTORY.
 
 
Thank's Guys.

0
Comment
Question by:lshuki
1 Comment
 
LVL 7

Accepted Solution

by:
dolomiti earned 500 total points
ID: 24141674
I don't believe exist, native, some that reports "Permissions".
You can build query/script that report user's attributes.
Permissions in Windows are object specific: in the object (ie a folder), you say
who can what, but there is not a global DB that holds all it.

Take in mind that AD, is just a trik to load registry: when Computer boots, read in the policies what it
has to load in HKLM, while when a user logs in, it loads from AD, HKCU. Programs, when run, read registry, not policies. when a process access a resource (printer,file) it reads object-permission.
In the AD,+ local policies, is reported if user is a member of, not what generally do: this depends from the resource.

How do you create a user, by normal way ?
Can you remova new created user from Domain Admins Group?

bye
vic
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question