Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Shaun E on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

quickest way to determine what permissions a group has? 1

Status
Not open for further replies.

UKHicks

IS-IT--Management
May 11, 2004
141
US
I just found out that one of the desktop support guys has the ability to create OU's! After looking at his account i can't see any groups that would give him this ability. I must be missing something. What is the quickest way to determine what permissions a group has?
 
Take a look to see if he has been delegated rights in AD.



I hope you find this post helpful.

Regards,

Mark
 
Mark, I will check for that. Thanks for your fast response.

In 'active directory users and computers' if I select 'View' and 'advanced features' and click on the security tab, what is this telling me? For example I have found a group called 'IT Staff' and under the security tab i see things like 'Domain admins', 'Enterprise admins' etc
 
That shows you the rights that people/groups have to the objects in AD.

I hope you find this post helpful.

Regards,

Mark
 
so if the group 'IT Staff' has full control of Enterprise admins then they can add people to this group?
 
Yes that is correct.

I hope you find this post helpful.

Regards,

Mark
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top