Solved

Printing Permissions Windows server 2003

Posted on 2009-04-14
1
251 Views
Last Modified: 2012-05-06
Is there any way that I can print my current users permissions?
Is it possible to do it?
I need to change some user permissions under my Ad, but I still need to view the current permissions.
My problem is that By default each one of my domain users is become an Admin Users, I dont know waywhy somebody told me that the first Administrator in this company by default creates a policy that makes everybody Domain Admins (really bad haaa).hamata)so I need to test the permissions before I'm changing something. I'm just thinking maybe there is a way to print this permission, only to camper; There are only 10 users under our ACTIVE DIRECTORY.
 
 
Thank's Guys.

0
Comment
Question by:lshuki
1 Comment
 
LVL 7

Accepted Solution

by:
dolomiti earned 500 total points
ID: 24141674
I don't believe exist, native, some that reports "Permissions".
You can build query/script that report user's attributes.
Permissions in Windows are object specific: in the object (ie a folder), you say
who can what, but there is not a global DB that holds all it.

Take in mind that AD, is just a trik to load registry: when Computer boots, read in the policies what it
has to load in HKLM, while when a user logs in, it loads from AD, HKCU. Programs, when run, read registry, not policies. when a process access a resource (printer,file) it reads object-permission.
In the AD,+ local policies, is reported if user is a member of, not what generally do: this depends from the resource.

How do you create a user, by normal way ?
Can you remova new created user from Domain Admins Group?

bye
vic
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
A company’s greatest vulnerability is their email. CEO fraud, ransomware and spear phishing attacks are the no1 threat to a company’s security. Cybercrime is responsible for the largest loss of money to companies today with losses projected to r…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now