cleaning up active directory

[bookouri]

Im trying to clean up our Active Directory and get rid of objects that are no longer used. I have a number of user groups that i dont think are used any more. But, is there any way to determing if one of these groups is still assigned to objects? If I have user group Alpha and there are users assigned to it, but i suspect that Alpha is not actually assigned to any objects, is there any way to audit the Alpha group to see if it is actually used on a share somewhere?

any suggestions would be appreciated

 

[WhoKilledKenny]

You can audit shares will a free utility called DumpSec (dump security).

http://www.somarsoft.com/

You can dump a report into excel. You can also set it up to dump other security settings such as User Rights and Security policies.

 

[bookouri]

thanks, ill take a look..