Guest JB Posted October 29, 2008 Posted October 29, 2008 Hello In Windows 2003 Server users can also be put into one or more groups. By putting users into these groups the users may inherit permissions and privileges that were not granted to them directly. If asked to administer user accounts to an existing Windows 2003 Server installation how would one track down all of the groups that a user account belongs to and how would one know what all the permissions and privileges are that the user inherited and were assigned directly? -- JB
Guest James Yeomans BSc, MCSE Posted October 29, 2008 Posted October 29, 2008 RE: Trace inherited account permissions/privileges Window 2003 Server You can go into Aactive Directory Users and Computers and locate the user account you are interested in. Double click the account and then go to the member of tab and you can see which security groups they are in. Is that all are do you need something else? James. -- James Yeomans, BSc, MCSE Ask me directly at: http://www.justaskjames.co.uk "JB" wrote: > Hello > > In Windows 2003 Server users can also be put into one or more groups. > By putting users into these groups the users may inherit permissions and > privileges that were not granted to them directly. > > If asked to administer user accounts to an existing Windows 2003 Server > installation how would one track down all of the groups that a user account > belongs to and how would one know what all the permissions and privileges are > that the user inherited and were assigned directly? > -- > JB
Guest Salvador Manaois III Posted October 30, 2008 Posted October 30, 2008 RE: Trace inherited account permissions/privileges Window 2003 Server You can use SHOWMBRS.exe (Win2k Resource Kit) to list all the groups a user is a member of. To view the effective permissions a user has on a folder/file, you can use the "Effective Permissions" tool. http://technet.microsoft.com/en-us/library/cc756795.aspx Regards, Salvador Manaois III MCSE MCSA CEH MCITP | Enterprise/Server Admin Bytes & Badz : http://badzmanaois.blogspot.com "JB" wrote: > Hello > > In Windows 2003 Server users can also be put into one or more groups. > By putting users into these groups the users may inherit permissions and > privileges that were not granted to them directly. > > If asked to administer user accounts to an existing Windows 2003 Server > installation how would one track down all of the groups that a user account > belongs to and how would one know what all the permissions and privileges are > that the user inherited and were assigned directly? > -- > JB
Recommended Posts