Active Directory - need a list of all users, groups and permission

[Guest]

We are using Windows 2000, I need to know how I can without having to go into
each one manually, list every user, group they belong to and their rights.

Thanks.

 

[Roger Abell [MVP]]

We are using Windows 2000, I need to know how I can without having to go
into
each one manually, list every user, group they belong to and their rights.

Cannot be done . . . well, at least not if by the "without . . . manually"
you mean "without visiting" each one (such as by scripted action).

The details of each is stored on/with each.

So, for the user you look at the user to see its groups; for the
groups you look at the groups to chase out the nesting; for the
rights you look at the definitional statement of the rights' grantees.

You are after a form of infrastructure mgmt reporting, something
mostly not provided in the base OS. Doing the accounts and groups
is fairly simple but doing the "their rights" part means visiting and
examining in detail each and every "rights grantor" resource and is
quite nontrivial.

Roger

 

[Guest]

So, can you recommend a tool that will provide this information in at least
summary fashion. We, e.g., are after a periodic list of users with
adminsitrative access to the network.