Searching security by group

[acl03]

We're migrating shares from netware to AD. Netware has a feature where you can select a group, and then search a directory tree to find where that group has designated rights.

Does AD have a feature like this? Once we create groups, how can we go back later to find out what specific folders that group has been given rights to?



Thanks,
Andrew

 

[BenChristian]

Unfortunately AD doesn't provide that functionality. For that reason, you're best to use a Domain Local group for each specific permission on resources and then add global groups or univeral groups into the DL group. Using this method, you can view the 'Member of' tab for the group and see what domain local groups the group in question belongs to. It's not perfect, but its the only way that I'm aware of to acheive this (and it's MS best practice). It gets a bit messier though when you start nesting global groups and universal groups inside each other.



Ben Christian
MCSE, MCSA:Messaging

http://www.benchristian.com