ActiveDirSec.Org

The world's most trusted forum on Active Directory Security


Post Info TOPIC: How to View or Delete Active Directory Delegated Permissions


Newbie

Posts: 2
Date: Jul 23, 2012
How to View or Delete Active Directory Delegated Permissions
Permalink  
 


Hello Forum,

We are in the middle of an Active Directory Security Audit, and I have been tasked with submitting a report of who is delegated what access in Active Directory, and performing any clean-ups, so I would like to know how to view or delete Active Directory delegated permissions?

I am NOT looking for a way to enumerate who has what permissions in Active Directory. I am looking for a way to find out who is actually (effectively) granted what security permissions and delegated what administrative tasks in our Active Directory.

This forum seemed liked the best place to ask this question, so I'm hoping you can help us in this regard. This is very important for us, and it is a bit time sensitive. I would appreciate any assistance/pointers I can get.

Thank you.

Alex.



__________________


Newbie

Posts: 3
Date: May 30, 2013
How to View or Delete Active Directory Delegated Permissions
Permalink  
 


Hi Alex,

Have you considered using dsacls from Microsoft? I know it can be used to view Active Directory permissions, and if I remember correctly, it also has an Effective Permissions flag, although I've heard that its not quite accurate.

Not sure if this helps, but it being free is always a good starting point.

Cheers,

Pablo.



-- Edited by Pablo on Thursday 30th of May 2013 06:10:19 PM

__________________
Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Post to Digg Post to Del.icio.us
Members Login
Username 
 
Password 
    Remember Me