How to find security groups on the network?

[Rowen24]

This may be an impossible task but it would make my life easier if it can be done.

I am cleaning up our AD environment and we have a lot of groups that we cannot find where they belong on the network. Is there a script, dos command, anything that can find the path where a security group is managing?

Thanks,

 

[58sniper]

Look into CSVDE, which can export to a .csv file the info on groups, including the DN. That should show you where they are in AD.

http://www.computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[IllogicallyLogical]

What about the dsquery command?

http://technet2.microsoft.com/windo...43fd-4985-b429-cd53d3046f011033.mspx?mfr=true

Joey
A+, MCP

 

[Rowen24]

I use the dsquery to search for groups in Active Directory but what if I wanted to find the path that the group controls? I might not be explaining it right, sounds good in my head.

For example, I have a group called securityadmin. Now I want to find out what folders on our network that securityadmin group manages (listed in the security tab). I'm hoping that it would come back with a \\server\folder\folder type of information.

 

[IllogicallyLogical]

Check out these two Sysinternals Utilities.

AccessEnum v1.32
and
AccessChk v3.0

These tools will show you which users and groups have access to directories and files and which permissions they have.

Joey
A+, MCP

 

[Rowen24]

We are on the right track but those look more localized. Do you think there is a query in AD that could do what I want?

 

[IllogicallyLogical]

Hmmm.....what about ShareEnum v1.6?

Joey
A+, MCP