Windows 2008 Domain Local Group - what rights does the group have?

lanman777 used Ask the Experts™
I have a domain local group in an Windows 2008 AD network. What command can I run to see what rights the group has?
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2012

Domain Local Groups are used to access local resources within the domain these groups can have access to files and folders across the domain so it is hard to say what it is attached too
Senior Systems Admin
Top Expert 2010
If you're looking for User Rights Assignment, you need to check your group policy settings under Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment. The user rights assigned to a group will change depending on the GPO that the right is assigned in and where that GPO is applied. File permissions assigned to a group vary greatly depending entirely on how permissions are set. For those two reasons, there are no commands that you can run to get *all* the rights and permissions assigned to a specific group, and the group scope (Global, Universal, Domain Local) has no impact on what the group can access, only where members of the group can come from.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial