?
Solved

Delegate Control of an OU - Reporting?

Posted on 2013-06-19
7
Medium Priority
?
331 Views
Last Modified: 2014-07-31
Is there any way or tool you know of that I can use to look through our AD structure to see what OU's have someone assigned as a Delegate Control?
0
Comment
Question by:iNetSystem
  • 3
  • 2
6 Comments
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 39260565
Yes you can use dsrevoke with the /report command.

dsrevoke /report /domain:{domain name} {domain\username}
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 39260571
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 39260590
dsrevoke might not work depending on the version, good powershell work around here

http://blogs.technet.com/b/askds/archive/2011/10/28/friday-mail-sack-they-pull-me-back-in-edition.aspx#dsrevoke

There is another Microsoft tool that I've been using recently.   The AD ACL Scanner

http://blogs.technet.com/b/pfesweplat/archive/2013/05/13/permissions-in-ad-lost-control.aspx

Thanks

Mike
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 35

Expert Comment

by:Joseph Daly
ID: 39260614
That AD ACL scanner is pretty cool.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39260618
Agree, I think they should build that into AD but I think they are focusing all development time on the cloud :)

Thanks

Mike
0
 
LVL 18

Expert Comment

by:Sarang Tinguria
ID: 39261465
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question