Windows Administration Resource Kit: Productivity Solutions for IT Professionals

5-4: Evaluate, Report, and Revoke Active Directory Permissions

Solution overview

Type of solution	Tools and guidance
Features and tools	Dsacls, ACLDiag, ADFind, DSRevoke, Effective Permissions
Solution summary	Apply a variety of tools to evaluate, document, and remove administrative delegations.
Benefits	Gain understanding of the current state of your Active Directory delegation.

Introduction

Although Windows makes it relatively easy to delegate permissions within Active Directory using the Delegation Of Control Wizard, it is not as easy to un-delegate permissions. Nor is it easy to report existing permissions or evaluate the effective permissions of a specific user or group. In this solution, we discuss some of the options you have for performing these ...