<div>
Yes you can use dsrevoke with the /report command. <br />
<br />
dsrevoke /report /domain:{domain name} {domain\username}
</div>


Yes you can use dsrevoke with the /report command.

dsrevoke /report /domain:{domain name} {domain\username}

<div>
Link to technet showing usage of dsrevoke. <br />
<a href="http://social.technet.microsoft.com/wiki/contents/articles/6477.how-to-view-or-delete-active-directory-delegated-permissions.aspx" rel="ugc nofollow">http://social.technet.microsoft.com/wiki/contents/articles/6477.how-to-view-or-delete-active-directory-delegated-permissions.aspx</a>
</div>


Link to technet showing usage of dsrevoke.
http://social.technet.microsoft.com/wiki/contents/articles/6477.how-to-view-or-delete-active-directory-delegated-permissions.aspx [http://social.technet.microsoft.com/wiki/contents/articles/6477.how-to-view-or-delete-active-directory-delegated-permissions.aspx]

<div>
That AD ACL scanner is pretty cool.
</div>


<div>
Agree, I think they should build that into AD but I think they are focusing all development time on the cloud :)<br />
<br />
Thanks<br />
<br />
Mike
</div>


Agree, I think they should build that into AD but I think they are focusing all development time on the cloud :)

Thanks

Mike

<div>
I would have given liza a try ...Best tool to check AD OU permissions<br />
<br />
<a href="http://social.technet.microsoft.com/wiki/contents/articles/5036.free-active-directory-security-permission-and-acl-analysis-tool.aspx" rel="ugc nofollow">http://social.technet.microsoft.com/wiki/contents/articles/5036.free-active-directory-security-permission-and-acl-analysis-tool.aspx</a>
</div>


I would have given liza a try ...Best tool to check AD OU permissions

http://social.technet.microsoft.com/wiki/contents/articles/5036.free-active-directory-security-permission-and-acl-analysis-tool.aspx [http://social.technet.microsoft.com/wiki/contents/articles/5036.free-active-directory-security-permission-and-acl-analysis-tool.aspx]

<div>
<div class="content wysiwyg-content">
Is there any way or tool you know of that I can use to look through our AD structure to see what OU's have someone assigned as a Delegate Control?
</div>
</div>


Is there any way or tool you know of that I can use to look through our AD structure to see what OU's have someone assigned as a Delegate Control?

Delegate Control of an OU - Reporting?

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.