Trace inherited account permissions/privileges Window 2003 Server

[JB]

Hello

In Windows 2003 Server users can also be put into one or more groups.
By putting users into these groups the users may inherit permissions and
privileges that were not granted to them directly.

If asked to administer user accounts to an existing Windows 2003 Server
installation how would one track down all of the groups that a user account
belongs to and how would one know what all the permissions and privileges are
that the user inherited and were assigned directly?
--
JB

 

[James Yeomans BSc, MCSE]

RE: Trace inherited account permissions/privileges Window 2003 Server

You can go into Aactive Directory Users and Computers and locate the user
account you are interested in. Double click the account and then go to the
member of tab and you can see which security groups they are in. Is that all
are do you need something else?
James.
--
James Yeomans, BSc, MCSE
Ask me directly at: http://www.justaskjames.co.uk


"JB" wrote:

> Hello
>
> In Windows 2003 Server users can also be put into one or more groups.
> By putting users into these groups the users may inherit permissions and
> privileges that were not granted to them directly.
>
> If asked to administer user accounts to an existing Windows 2003 Server
> installation how would one track down all of the groups that a user account
> belongs to and how would one know what all the permissions and privileges are
> that the user inherited and were assigned directly?
> --
> JB

 

[Salvador Manaois III]

RE: Trace inherited account permissions/privileges Window 2003 Server

You can use SHOWMBRS.exe (Win2k Resource Kit) to list all the groups a user
is a member of.

To view the effective permissions a user has on a folder/file, you can use
the "Effective Permissions" tool.

http://technet.microsoft.com/en-us/library/cc756795.aspx

Regards,

Salvador Manaois III
MCSE MCSA CEH MCITP | Enterprise/Server Admin
Bytes & Badz : http://badzmanaois.blogspot.com


"JB" wrote:

> Hello
>
> In Windows 2003 Server users can also be put into one or more groups.
> By putting users into these groups the users may inherit permissions and
> privileges that were not granted to them directly.
>
> If asked to administer user accounts to an existing Windows 2003 Server
> installation how would one track down all of the groups that a user account
> belongs to and how would one know what all the permissions and privileges are
> that the user inherited and were assigned directly?
> --
> JB