how to see where the group has rights

[OlssonR]

I have a few groups in my active directory that I want to delete but I don't
know if they have rights to anything.

Is there any place where I can see if the group have any rights to the file
system or anything else before I delete them?

They have no members so probably I can delete them.

/RO

 

[Tim Springston \(MSFT\)]

I don't beleive there is a tool to locate any permissions (process,
registry, service, NTFS, DS) that a user or group has all in one fell swoop.
It should not be a concern, however, leaving that user or group in access
control lists after the object deletion.

The one exception to that is user rights assignment. It would be a good
idea to remove the user or group you are deleting from any user rights
settings in group policies. You can still do it after object deletion, but
the object will appear as a security identifier rather than a user or groups
displayname.

User rights can be found at Computer Configuration->Windows
Settings->Security Settings->Local Policies->User Rights Assignment in each
group policy in that domain. You can also look at a server or workstations
Effective Setting for the comparable place in SECPOL.MSC.

 

[paul]

Use this freeware showacls.exe

http://www.dynawell.com/reskit/microsoft/win2000/showacls.zip

Doc included...

(e-mail address removed)