Trace inherited account permissions/privileges Window 2003 Server

[Guest JB]

Hello

 

In Windows 2003 Server users can also be put into one or more groups.

By putting users into these groups the users may inherit permissions and

privileges that were not granted to them directly.

 

If asked to administer user accounts to an existing Windows 2003 Server

installation how would one track down all of the groups that a user account

belongs to and how would one know what all the permissions and privileges are

that the user inherited and were assigned directly?

--

JB

[Guest James Yeomans BSc, MCSE]

RE: Trace inherited account permissions/privileges Window 2003 Server

 

You can go into Aactive Directory Users and Computers and locate the user

account you are interested in. Double click the account and then go to the

member of tab and you can see which security groups they are in. Is that all

are do you need something else?

James.

--

James Yeomans, BSc, MCSE

Ask me directly at: http://www.justaskjames.co.uk

 

 

"JB" wrote:

> Hello

>

> In Windows 2003 Server users can also be put into one or more groups.

> By putting users into these groups the users may inherit permissions and

> privileges that were not granted to them directly.

>

> If asked to administer user accounts to an existing Windows 2003 Server

> installation how would one track down all of the groups that a user account

> belongs to and how would one know what all the permissions and privileges are

> that the user inherited and were assigned directly?

> --

> JB

[Guest Salvador Manaois III]

RE: Trace inherited account permissions/privileges Window 2003 Server

 

You can use SHOWMBRS.exe (Win2k Resource Kit) to list all the groups a user

is a member of.

 

To view the effective permissions a user has on a folder/file, you can use

the "Effective Permissions" tool.

 

http://technet.microsoft.com/en-us/library/cc756795.aspx

 

Regards,

 

Salvador Manaois III

MCSE MCSA CEH MCITP | Enterprise/Server Admin

Bytes & Badz : http://badzmanaois.blogspot.com

 

 

"JB" wrote:

> Hello

>

> In Windows 2003 Server users can also be put into one or more groups.

> By putting users into these groups the users may inherit permissions and

> privileges that were not granted to them directly.

>

> If asked to administer user accounts to an existing Windows 2003 Server

> installation how would one track down all of the groups that a user account

> belongs to and how would one know what all the permissions and privileges are

> that the user inherited and were assigned directly?

> --

> JB