ActiveDirSec.Org

The world's most trusted forum on Active Directory Security


Post Info TOPIC: How to use dsacls to view what permissions / rights a user / group has in Active Directory?


Newbie

Posts: 3
Date: Aug 14, 2013
How to use dsacls to view what permissions / rights a user / group has in Active Directory?
Permalink  
 


Hello,

I am trying to figure out how to use dsacls to find out what rights a specific user has in our Active Directory domain, and could really use some help right now. 

We need to know find out what access rights one of our contractor accounts has in our Active Directory. Since he is also a member of about a dozen security groups, I also need to find out what access rights those groups have in our Active Directory.

One of my colleagues seems to have made when using the Delegation Wizard to delegate authority and we suspect that in doing so he may accidentally granted this contractor more powers than he is supposed to have. We are not so concerned about read rights; we are concerned about modify rights, such as password reset rights, and group membership modification rights.

Can someone please help me figure out how to do this with dsacls?

Danke!

Gunter.



-- Edited by GunterK on Wednesday 14th of August 2013 01:38:48 PM

__________________
Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Post to Digg Post to Del.icio.us
Members Login
Username 
 
Password 
    Remember Me