Home > Ask the Windows Server Experts > Archive: Microsoft Active Directory Questions & Answers > Backward checking permission for groups in Active Directory
Ask The Windows Server Expert: Questions & Answers
EMAIL THIS

Backward checking permission for groups in Active Directory

Paul Hinsberg EXPERT RESPONSE FROM: Paul Hinsberg

Pose a Question
Other Windows Server Categories
Meet all Windows Server Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 15 November 2004
We are new to AD and are trying to do some cleanup. We have a ton of groups, some which are legacy groups and may not be needed anymore. Is there any way to backward check permissions for these groups? In other words, we're trying to find out what a group has access to in order to determine if the group is still needed. Can AD accomplish this? If not, do you know of a tool that can? Thanks much!

>
This is not something that AD does. It seems like you are asking if the various user groups have access to resources. They confirm that you would have to check the permissions, group membership, and control lists on shares. The Active Directory Migration Tool can help with some of this and managing any big changes. There are also several Resource Kit utilities that allow you to check permissions and groups memberships. Scripted solutions are an option -- the Microsoft Script Center and the Script Center Depotare good choices. I have no doubt that there are utilities that you could purchase for this as well; however, I have a habit of selecting free tools.

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Microsoft Active Directory Tools and Troubleshooting
How to find and remove lingering objects in Active Directory
DNS troubleshooting best practices
Generating a DNS health check in Windows
Debugging Windows client logon delays: Narrowing the scope
Troubleshooting poor Windows logon performance in Active Directory environments
New Operations Manager 2007 feature allows for automated agent deployments
Taming the LSASS.exe process for Active Directory performance and security
Active Directory FAQs
Troubleshooting Active Directory database errors
Troubleshooting a cross-forest trust in Active Directory

Archive: Microsoft Active Directory
Creating user home directories on a Windows 2003 network
Changing NTDS links with Active Directory
Can I add a Win2003 Server to an NT4 domain without AD?
Filtering workstation logon events to log only user activity
Error of event ID 7031 when attempting to move mailboxes
Finding the creation date of objects
Duplicating Windows 2000 domain as Windows 2003 test environment
Child domains not finding global catalog
How can I configure user profiles on a Windows 2000 Server?
Changing domain controller names in Windows 2000 Server

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Windows Server Solutions - Intel Hardware Solutions
HomeTopicsBlogsITKnowledge ExchangeTipsNewsMultimediaWhite PapersIT Downloads
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts