Solved

AD group right

Posted on 2014-11-07
5
176 Views
Last Modified: 2014-11-24
Is there a way I can export list of users and their rights (reset password, add users and so on) to a specific AD group?

Please advise.

Thanks.
0
Comment
Question by:nav2567
5 Comments
 
LVL 13

Expert Comment

by:Rizzle
ID: 40429597
0
 

Author Comment

by:nav2567
ID: 40429614
Sorry, not exactly.  

What I need to know is export who have right to do what in that particular group.

Thanks.
0
 
LVL 24

Assisted Solution

by:Coralon
Coralon earned 200 total points
ID: 40431965
Access Check is your friend here.. http://technet.microsoft.com/en-us/sysinternals/bb664922

Coralon
0
 
LVL 36

Accepted Solution

by:
Mahesh earned 300 total points
ID: 40431994
Try Get-Acl PowerShell cmdlet as per below post
http://blogs.technet.com/b/ashleymcglone/archive/2013/03/25/active-directory-ou-permissions-report-free-powershell-script-download.aspx
It will show you what permissions the particular Group has on OUs

Also export your all GPOs in html format
Get-GPOReport -All -Domain contoso.com -Server DC1 -ReportType Html -Path C:\GPOReports\GPOReportsAll.html

Open in new window

Then open above report in IE and find out if particular group has defined permissions in any  GPO

Alternatively you can check 3rd party product such as
http://www.paramountdefenses.com/products/active-directory-audit-tool/capabilities/acl-viewer-and-exporter.html
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This article runs through the process of deploying a single EXE application selectively to a group of user.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question