Query AD users for security inheritance

[sonicman]

Does anybody know how to query Active Directory in order to find all users whose accounts are not inheriting security permissions?

In other words, I want to know which users have the "Inherit from parent the permission..." box unchecked.

This box is found by right-clicking on the user,
selecting Properties,
Security tab,
Advanced button

TIA!

Jeremy

 

[adcfaq]

try dsacls

http://www.microsoft.com/technet/pr...Ref/e01d44c1-6018-4ac0-a419-79f9ad547d37.mspx

 

[adcfaq]

also, adminsdholder in win2003 will reset the flag of "Inherit from parent the permission" to be unchecked.