Anyone have a script or link to export permissions for objects using
DSACLS? If there is another method that would be great as well.
Looking for a method to script out the SELF permissions on all user
accounts to find discrepancies.

Thanks,


James Chong (MVP)

Re: DSACLS Script to Export Permissions by Joe

Joe
Fri May 11 16:17:55 CDT 2007

Take a look at AdFind. You can dump the nTSecurityDescriptor attribute
and have it decoded (look at -sddl++ and -resolvesids) and it allows you
to specify a query and dump all objects returned by that query. Also I
think the format is a little nicer than DSACLS for looking at multiple
objects.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Jamestechman wrote:
> Anyone have a script or link to export permissions for objects using
> DSACLS? If there is another method that would be great as well.
> Looking for a method to script out the SELF permissions on all user
> accounts to find discrepancies.
>
> Thanks,
>
>
> James Chong (MVP)
>