Yahoo Answers is shutting down on 4 May 2021 (Eastern Time) and the Yahoo Answers website is now in read-only mode. There will be no changes to other Yahoo properties or services, or your Yahoo account. You can find more information about the Yahoo Answers shutdown and how to download your data on this help page.
Can I list permissions for an active directory group?
Is there a way to get a list of all the permissions that have been granted to a group in active directory?
If, for example, the group FinanceDept has Read&Execute to \\server1\files\goodfiles and Modify to \\server2\stuff\otherstuff\herebewabbits could I get a list that showed this?
Obviously I can get properties of each share or folder and see who has permissions to it, but with all the servers and shares and subfolders, checking them one at a time isn't an option. Until last year we had a Novell network, so I'm used to this information being easy to get.
Possibly more complex than the usual YA question, but I think you can handle it.
1 Answer
- 1 decade agoFavourite answer
Unfortunately I don't think a quick way exists to query across multiple servers. You'd have to query each machine individually; ACLs for local resources are not stored in AD.
However you could write a script that could query a known list of servers. Try PowerShell; or possibly a VB Script. There's a microsoft dude called "Hey Scripting Guy", that blog probably has some good answers. Sounds like quite a fun challenge.
Powershell is all the rage now; learn it, and you'll be revered. :D
