G
Guest
The DSREVOKE tool is now available for download at www.microsoft.com/downloads. A keyword search for DSREVOKE will take you to the tool. There is also a document describing the tools usage
This tool is referenced in the upcoming whitepaper on delegation of administration which should be available at the same location by 11/21.
Thanks
Sanjay Tando
Program Manage
Active Directory Security & Delegation of Administration
Windows Server Grou
Microsoft Corporatio
PS: Tool Functionality Overview
Dsrevoke is a command-line tool that can be used on domain controllers that are running Windows Server 2003 or Windows 2000 Server to report the existence of all permissions for a specific user or group on a set of OUs in a domain and optionally remove from the DACLs of a set of OUs all permissions specified for a particular user or group. Dsrevoke complements the functionality provided by the Delegation of Control Wizard, which is used to delegate administrative authority, by providing the ability to revoke delegated administrative authority.
This tool is referenced in the upcoming whitepaper on delegation of administration which should be available at the same location by 11/21.
Thanks
Sanjay Tando
Program Manage
Active Directory Security & Delegation of Administration
Windows Server Grou
Microsoft Corporatio
PS: Tool Functionality Overview
Dsrevoke is a command-line tool that can be used on domain controllers that are running Windows Server 2003 or Windows 2000 Server to report the existence of all permissions for a specific user or group on a set of OUs in a domain and optionally remove from the DACLs of a set of OUs all permissions specified for a particular user or group. Dsrevoke complements the functionality provided by the Delegation of Control Wizard, which is used to delegate administrative authority, by providing the ability to revoke delegated administrative authority.