Solved

How to compare 'Effective Permissions" for 2 AD accounts

Posted on 2016-11-08
1
74 Views
Last Modified: 2016-11-14
Hi,

I want to compare 2 AD accounts 'Effective Permissions". Is there an easy way to do this, i.e using PowerShell?? I'm running MS Windows Server 2008 R2.
0
Comment
Question by:CBB
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 41879985
you can use quest free PowerShell module to compare user account permissions

Get-QADUser -Name user1 -SecurityMask DACL | Get-QADPermission -Inherited -SchemaDefault

compare-object (Get-QADPermission user1 -Inherited | select Rights) (Get-QADPermission user2 -Inherited | select rights)

Open in new window


download link
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question