how to extract all permissions that a domain user have on the network
Posted
by
Alexandre Jobin
on Server Fault
See other posts from Server Fault
or by Alexandre Jobin
Published on 2012-04-02T14:26:07Z
Indexed on
2012/04/03
5:32 UTC
Read the original article
Hit count: 817
I would like to know all the permissions a windows domain user have in my network. Is there a way, with a script file or a tool, that can extract this kind of information by checking all the servers and computers in my network? I'm on a Microsoft network with Windows Server 2008 R2, Windows XP, Windows 7.
The report should include these kind of informations:
- report all permissions that the domain user have (read, write, etc...)
- if the domain user is in a domain group, tell me the permissions that this group have in my network
so the report could be something like this:
Permissions for USER_A in the DOMAIN.COM
- the user is part of theses domain groups:
- GROUP_A
- GROUP_B
- SERVER_A
- W:\wwwRoot (R/W inherited from GROUP_A)
- W:\sharedFolder (R)
- SERVER_B
- c:\projects (R/W)
- c:\projects\project_a (R/W)
- c:\projects\project_b (R/W)
- c:\dumpfolder (R/W inherited from GROUP_B)
- COMPUTER_A
- LOCAL\Administrator
- c:\ (R/W)
© Server Fault or respective owner