S
Spongebrain
Just wondering the best way of reverse-checking permissions.
The situation is that UserA can reset the password of UserB but
shouldn't be able to. Both users are members of multiple groups, none
of which give any clue to having the ability to reset passwords.
I can check under the user's Security tab - Advanced - Effective
Permissions and see the inherited right of UserA being able to change
the password but it won't tell me where from. I can't believe I need
to go through the laborious process of removing the user from groups
and changing passwords to find out which group it is !!
I'm sure when I used to work with Novell NDS checking this sort of
permissions was a piece of cake - surely there must be a way with MS's
directory ?
cheers,
Steve
The situation is that UserA can reset the password of UserB but
shouldn't be able to. Both users are members of multiple groups, none
of which give any clue to having the ability to reset passwords.
I can check under the user's Security tab - Advanced - Effective
Permissions and see the inherited right of UserA being able to change
the password but it won't tell me where from. I can't believe I need
to go through the laborious process of removing the user from groups
and changing passwords to find out which group it is !!
I'm sure when I used to work with Novell NDS checking this sort of
permissions was a piece of cake - surely there must be a way with MS's
directory ?
cheers,
Steve