Solved

Printing Permissions Windows server 2003

Posted on 2009-04-14
1
248 Views
Last Modified: 2012-05-06
Is there any way that I can print my current users permissions?
Is it possible to do it?
I need to change some user permissions under my Ad, but I still need to view the current permissions.
My problem is that By default each one of my domain users is become an Admin Users, I dont know waywhy somebody told me that the first Administrator in this company by default creates a policy that makes everybody Domain Admins (really bad haaa).hamata)so I need to test the permissions before I'm changing something. I'm just thinking maybe there is a way to print this permission, only to camper; There are only 10 users under our ACTIVE DIRECTORY.
 
 
Thank's Guys.

0
Comment
Question by:lshuki
1 Comment
 
LVL 7

Accepted Solution

by:
dolomiti earned 500 total points
Comment Utility
I don't believe exist, native, some that reports "Permissions".
You can build query/script that report user's attributes.
Permissions in Windows are object specific: in the object (ie a folder), you say
who can what, but there is not a global DB that holds all it.

Take in mind that AD, is just a trik to load registry: when Computer boots, read in the policies what it
has to load in HKLM, while when a user logs in, it loads from AD, HKCU. Programs, when run, read registry, not policies. when a process access a resource (printer,file) it reads object-permission.
In the AD,+ local policies, is reported if user is a member of, not what generally do: this depends from the resource.

How do you create a user, by normal way ?
Can you remova new created user from Domain Admins Group?

bye
vic
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Suggested Solutions

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now