ARS does it but it's expensive in terms of monetary resources J
From: Michael B. Smith [mailto:mich...@owa.smithcons.com] Sent: Wednesday, May 13, 2009 3:33 PM To: NT System Admin Issues Subject: RE: AD groups search to find out where group is all applied in domain It could be written...but it would be "expensive" in terms of processing resources. ________________________________ From: James Rankin [kz2...@googlemail.com] Sent: Wednesday, May 13, 2009 7:54 AM To: NT System Admin Issues Subject: Re: AD groups search to find out where group is all applied in domain If such a tool exists, I sure would have liked to have had it when I worked for Quantum :-) You could maybe try using the command-line version of dumpsec.exe to drop a permissions report on a list of fileservers and pull out those entries with a specified group name, but it would probably take a very long time to run 2009/5/13 Bill K <cwsball...@gmail.com> I have AD groups I would like to do a "reverse lookup" to find out all the servers/shares that the group is applied on within the domain. This would be a great tool for finding out what legacy AD groups give access to if it was never documented. Does anyone know how to do this? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
