Active Directory tree permissions

Posted on 2012-08-31
Last Modified: 2012-09-05
When I right clicked on the domain and then went to the security > Advanced > Effective Permission>, I entered one username which tends to have alot of permissions. I can't determine from the current view which  computer object & user object, OU, does the particular user has access to.

Is there some tool or script out there to figure this out easily.
Question by:alisafia
    LVL 9

    Assisted Solution

    LVL 57

    Accepted Solution

    I wish AD was better with this out of the box.  Give LIZA a try


    LVL 18

    Expert Comment

    by:Sushil Sonawane
    LVL 57

    Expert Comment

    by:Mike Kline
    sushil84, that is the same tool I mentioned.  please try to add to the discussion and not repeat the previous answer.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    One of the major disadvantages of still running XP in production is its lack of Internet Explorer Favourites directory redirection. If your users frequently roam between computers, the usual workaround is to enable Roaming Profiles to have the favou…
    I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now