Re: Global Groups and What Resources they Give access to

Jorge, thanks tremendously for the information. I will do more research on
these tools tomorrow when I arrive at the office.
--
All About Solutions!!


"Jorge de Almeida Pinto [MVP - DS]" wrote:

no there isn't one tool or way to show all permission assignment to
resources for a certain group or user

for AD try to use DSREVOKE
for files/folders/shares/services try to use SUBINACL

AD is distributed so you would only need to consult one DC for each AD
domain
for other non-distributed resources you need to consult each server

this is a reason WHY you should design your group(naming), permissions and
resources very carefully

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

"OnPoint" <OnPoint@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7339A597-9983-4BCE-A8EF-73D1272A61D9@xxxxxxxxxxxxxxxx
Hey folks, newbie here..

Are there any utilities within Windows Server 2003 or Active Directory
that
will tell me all of the resources which a particular Global Group grants
access to? So for example, User A is a member of the Global group
G_TEST_Resources. But no one seems to know what this group gives access
to.

I'm looking for a tool\utility that can tell me if the group gives access
to
a particular share, a folder on a share, a printer, sharepoint, site.etc..
I
took a look through the Windows Resource Kit Tools for Server 2003 but
nothing seemed to jump out. For my client this is a huge compliancy issue
when you dont know what your global groups even give access to..SMH.. Any
help is appreciated.
--
All About Solutions!!


.

Relevant Pages

  • Re: Seperate Domain Trusts
    ... Using the trust, you can grant access to resources in DOMAIN2 by adding DOMAIN1/USER1 to the ACL. ... If in DOMAIN2 Global Groups are used to grant access to resources, you cannot add the user from DOMAIN1, as a global group can only contain members of the domain it is located in. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Microsoft Security Groups
    ... resources, ... Global and Domain local groups for the past few ... > When would you use this group over a global group and why? ... > Microsoft recommends that you don't apply any permissions to the user ...
    (microsoft.public.security)
  • Re: Global Groups and What Resources they Give access to
    ... no there isn't one tool or way to show all permission assignment to resources for a certain group or user ... for other non-distributed resources you need to consult each server ... User A is a member of the Global group ...
    (microsoft.public.windows.server.security)
  • Global Groups and the resources they give access to??
    ... Are there any utilities within Windows Server 2003 or Active Directory that ... will tell me all of the resources which a particular Global Group grants ... User A is a member of the Global group ...
    (microsoft.public.windowsxp.security_admin)
  • Global Groups and What Resources they Give access to
    ... Are there any utilities within Windows Server 2003 or Active Directory that ... will tell me all of the resources which a particular Global Group grants ... User A is a member of the Global group ...
    (microsoft.public.windows.server.security)