There is no wizard to do such, you would have to look at the permissions on the OU to
see what a particular users or group has. All the delegation wizard does is create
the needed permissions. It may help to compare permissions to a default OU [which you
could easily create] to see where differences in permissions exist. You can also use
dsacls to view [as in dsacls ou=myou,dc=mydomain,dc=com] and manage AD permissions on
objects and it can also reset permissions back to default with the /d switch. ---
Steve
You can look at the delegated permissions either through dsacls or the security
tab of the object you are concerned about. This works on either 2K or K3.
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.