Link to home
Start Free TrialLog in
Avatar of Parity123
Parity123Flag for United States of America

asked on

Powershell: Permissions

Hello experts,

I need help with a script  to identify users that have explicit permissions to modify objects in AD. It is a 2012 domain.

Your assistance is much appreciated.

Thanks.
ASKER CERTIFIED SOLUTION
Avatar of Shaun Vermaak
Shaun Vermaak
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Parity123

ASKER

I can’t seem to find checkdsacls.exe. The above switches do not work for DSACLS.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I don’t want to pass a username, instead get all users that have explicit permissions.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Shaun- I downloaded the archive, I only see the source code (CS file), but no .exe.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Shaun - It creates a huge file as we have a large domain with thousands of groups. I am interested in just the user accounts that have been granted explicit permissions.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
That's what I ran.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
It lists all the thousands of groups, one line for each right. I may have only 50+ users, so I just needed the user list.
I may have only 50+ users with explicit permissions set, and I want to just get this list.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Is there a better way to get this info using powershell. I need to automate this and send a report weekly.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I need to find a way to automate this. Manual method will not work in this case.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Solutions provided.