Permissions assessment (AD/Files)

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Hi,

As a new admin to a company I am interested in knowing what delegated
rights have been given to users on a large AD. Are there any tools
that allow you to see this? I would rather not check each container
in AD Users & Computers.

I have looked at the DSREVOKE command but you have to know where your
permissions are in the first place.

Thanks in advance,
Hutton.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

I don't know of such a tool. You can use dsacls /s to reset permissions to
AD objects/trees if that would help. --- Steve


"Hutton" <H_Henry@yahoo.com> wrote in message
news:d4ca7b94.0411020309.27970f5d@posting.google.com...
> Hi,
>
> As a new admin to a company I am interested in knowing what delegated
> rights have been given to users on a large AD. Are there any tools
> that allow you to see this? I would rather not check each container
> in AD Users & Computers.
>
> I have looked at the DSREVOKE command but you have to know where your
> permissions are in the first place.
>
> Thanks in advance,
> Hutton.