Print User Access in Active Directory

[mok123]

Hi,

Is there a tools or command to print the access list for all users in the active directory?

Thank you

Mok

 

[ITPangaeaArchitect]

dsacls.exe comes to mind

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Sr. Infrastructure Management Analyst
Distributed Systems Engineering
ACS, Inc.

 

[mok123]

Hi Brandon,

Thanks for the reply. However, I'm not familiar with the command and would appreciate if you could provide me with the syntax. I want to print or list out the security access for all users on folders/files assigned to them.

cheers,

Mok

 

[ITPangaeaArchitect]

oh this is for files and folders, for some reason I was thinking for ad objects...

cacls would be easiest for your needs

syntax:

*you created a folder on c: with special permissions you wish to view

cacls c:\test /t > c:\cacls.txt

this will bring down all permissions in the c:\test folder and all subfolders

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Sr. Infrastructure Management Analyst
Distributed Systems Engineering
ACS, Inc.

 

[ITPangaeaArchitect]

re-reading, it does appear AD perms are what you are looking for...my guess is you did a mistype?

I beleive you will be able to use the simple syntax of just dsacls <DN of object in AD> > c:\dsacls.txt

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Sr. Infrastructure Management Analyst
Distributed Systems Engineering
ACS, Inc.