Find all references to an AD group

[MG]

Does anyone know of a way to find all references to a certain group in
Active Directory? I am trying to find all places where this group is used
for permissions, rights, Group Policy, etc. I am trying to do this because
I want to delete the domain local group that I have in place now and replace
it with a global group, but I need to know where the group is currently
being 'used'.

Thanks!
MG

 

[Meinolf Weber]

Hello mg,

Check out this one:
http://www.microsoft.com/technet/sysinternals/FileAndDisk/AccessChk.mspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

 

[MG]

Thanks for the suggestions Meinolf. I played around with this utility a bit
and found it to be pretty useful, but it doesn't seem to have all of the
functionality I need.

One thing it is lacking is the ability to list folders/files/etc. that have
a specific group listed in their permissions. instead, the utility seems to
list all the files/folders/etc. to which that specific group has access.
This means if the group is a member of another group and that other group is
listed in the permissions for a resource, that resource would be listed.

The other problem: it doesn't look like the utility can operate on AD
objects/settings. For example, if I had a GPO that was based on this group,
I wouldn't be able to find it using this utility.

Thanks,
MG