rights

[mmark75]

just wondering what tool i would use to get a report back on the AD
wide rights of all the users on the network(by individual user). Thanks

 

[Paul Williams [MVP]]

When you say rights, are you referring to privileges (User Rights) or do you
mean permissions?
When you say network, are you talking about the Active Directory itself or
all servers on the network?

If you mean permissions, and are talking about the servers or AD, there's
nothing native that will simply do this. You can cook up some scripts and
then amalgamate the data, or you need to look at 3rd part solutions.
There's several. I believe one of Script Logic's products do this.
TreeSize Pro might as well -I can't remember as it's been years.

 

[Jorge de Almeida Pinto [MVP - DS]]

check:
http://www.kouti.com/samplescripts/bonus/ACLReport.vbs.txt

to view ACLs


--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx

 

[Leuchtflux]

just wondering what tool i would use to get a report back on the AD
wide rights of all the users on the network(by individual user). Thanks

You probably would be interested in looking at scriplogic's security
explorer (http://www.scriptlogic.com). We are using it as our main
security observation and management tool and it just has want you
probably want. It can scan the selected set of computers or file
system objects in the network and build the map report of user rights.
Then its possible to reveal the problematic roots or something, create
correct rights list and rebuild current rights by assigning corrected
rights template. The surely pleasant thing for me is the ease and
logic of use and remote management. Even our new admin which we
delegated to control on segment in one of offices was able to fix the
problem almost immediately.