Determining what objects security groups are assigned to.

[devilfix]

Hello all,
Does anyone know of a way to determine what objects a AD security groud might be assigned to? I'm looking for some sort of automated method to accomplish this. I'm hoping there is a way where I could select a security group and then see which directories or even documents it was access to. Any suggestions would be helpful. Thanks in advance.

 

[PScottC]

There are several commercial auditing tools available. I checked into a couple of different ones ranging in price from $1000 - $5000. These tools walk your network and report the information back to a SQL database. You can then run reports against specific groups, users, files, or directories.

What you are asking for is a fairly complex process, and there isn't a good solution that is free.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[devilfix]

Thanks PSC. Can you advise on the names of these applications?

 

[PScottC]

Reporter from Quest Software is the only one I can remember right now. Google can reveal dozens of others to you.

Good Luck!

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers