Domain User Right.

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

This is a simple question...
What is the best practise to find all user domain that have administrator rights of a domain?
 
Just check your membership of the domain admins group. Any Enterprise Admins
in the forest root will also have admin permissions on the domain.

Cocobaua78 said:
This is a simple question...
What is the best practise to find all user domain that have administrator
Click to expand...
rights of a domain?
 
The problem is that there might be nested groups in the AD and I'm trying to list automatically all the admins of a given domain.
Doing it by hand is quite long because of the big number of entries.
 
Script-wise it's just a case of enumerating memebers of the Domain Admins
group and then recursively enumerating any groups which are contained
therein.

However, if a domain has large nested groups in the Domain Admins group then
their is probably something seriously wrong with their security arrangement.
Actually, if you don't *know* who is a Domain Admin then you have really big
issues anyway.

AndyC


Cocobaua78 said:
The problem is that there might be nested groups in the AD and I'm trying
Click to expand...
to list automatically all the admins of a given domain.
 
Agreed, you should only have named users in the domain admins group, not
other groups.
 
Back
Top