Delegating Control in AD

[Guest]

I know how to go into AD and delegate control of OU's to certian users. My
question is, is there away for me to go into it AD and see waht users have
control over certain OU's?

Thank you

 

[Meinolf Weber]

Hello Darin,

Open the properties of the OU, Security Tab, go to Advanced and here you
can find the groups/users with the detailed configuration.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[c0d3r]

I'm pretty sure you can script this using vbscript and adsi
(enumerate the OU's, get security, and then see if your user or group has
access to that OU)

I'm also pretty sure there are commercial tools that allow you to audit this
kind of access. You may want to have a look at the tools from
scriptlogic.com

c

https://petersblog.dyndns.org:8899