Joe
Fri May 11 16:17:55 CDT 2007
Take a look at AdFind. You can dump the nTSecurityDescriptor attribute
and have it decoded (look at -sddl++ and -resolvesids) and it allows you
to specify a query and dump all objects returned by that query. Also I
think the format is a little nicer than DSACLS for looking at multiple
objects.
--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net
---O'Reilly Active Directory Third Edition now available---
http://www.joeware.net/win/ad3e.htm
Jamestechman wrote:
> Anyone have a script or link to export permissions for objects using
> DSACLS? If there is another method that would be great as well.
> Looking for a method to script out the SELF permissions on all user
> accounts to find discrepancies.
>
> Thanks,
>
>
> James Chong (MVP)
>