ActiveDirSec.Org

The world's most trusted forum on Active Directory Security


Post Info TOPIC: How to bulk export (dump) Active Directory ACLs to analyze delegations?


Newbie

Posts: 3
Date: May 25, 2012
How to bulk export (dump) Active Directory ACLs to analyze delegations?
Permalink  
 


Hello,

We are trying to get a better handle at who is delegated what access in our Active Directory, and figured that if we could export/dump all the ACLs in our core OU, then we could use Excel or other tools to try and analyze these ACLs to find out who is delegated what access.

I would thus like to know how to bulk export (dump) Active Directory ACLs to analyze delegations made in Active Directory?

If we can export/dump all our Active Directory ACLs to a text/csv file, then we may be able to find out who has what permissions where, and that would be helpful in accomplsihing our goals.

I would like to know if there is any easy way to dump Active Directory ACLs? If you know of one, thank you for letting us know.

-Hans



__________________

A fine beer may be judged with only one sip, but it's better to be thoroughly sure!

 



Member

Posts: 16
Date: Jun 22, 2012
RE: How to bulk export (dump) Active Directory ACLs to analyze delegations?
Permalink  
 


Hans,  

Have you considered writing scripts or using Powershell? Agreed, these may not be the most efficient or reliable way to go, but they're certainly A way.

There might also be some freeware out there that could do this.

Aaron.



__________________
Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Post to Digg Post to Del.icio.us
Members Login
Username 
 
Password 
    Remember Me