RE: [ActiveDir] dumping DL permissions

[Creamer, Mark]

Thanks Joe & Brian,   Time to take the feet down off the desk again…K   MC   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, November 11, 2005 4:13 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] dumping DL permissions   Yep adfind will dump the ntsecuritydescriptor and decode it if you specify the attribute and add the -sddc option. Note it will be in SDDL format which is probably one of the easier formats for scripting but worse for reading.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Friday, November 11, 2005 3:53 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] dumping DL permissions Dumping all the DLs is easy. Something like adfind from joeware.net would do the trick. I’d just query for groups with mail=* since you can have mail enabled security grups. The ACLs, I think adfind decodes ACLs, but, you’ll still need to parse this information into something useable.   Thanks, Brian Desmond [EMAIL PROTECTED]   c - 312.731.3132     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: Friday, November 11, 2005 3:42 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] dumping DL permissions   One of our Exchange account admins wants to know if there is a tool that would dump a list of the name of each distribution list in the GAL along with who has the ability to add or remove members on each one. Would I approach this with a script or is there a tool I should point him towards?   Thanks, Mark This e-mail transmission contains information that is intended to be confidential and privileged. If you receive this e-mail and you are not a named addressee you are hereby notified that you are not authorized to read, print, retain, copy or disseminate this communication without the consent of the sender and that doing so is prohibited and may be unlawful. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please delete and otherwise erase it and any attachments from your computer system. Your assistance in correcting this error is appreciated. This e-mail transmission contains information that is intended to be confidential and privileged. If you receive this e-mail and you are not a named addressee you are hereby notified that you are not authorized to read, print, retain, copy or disseminate this communication without the consent of the sender and that doing so is prohibited and may be unlawful. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please delete and otherwise erase it and any attachments from your computer system. Your assistance in correcting this error is appreciated.