How do export all the rights an ID has on the AD

[Guest]

Hi everyone,

I am trying to do some AD cleanup. I need to know:
1. All the security rights that an ID has
2. All the network/printer shares that an ID has

Please advise. Thank you.

[cmccullough]

Re: How do export all the rights an ID has on the AD

I'm not quite sure what information you are looking for. Can you give me a few specific examples?

[Guest]

Re: How do export all the rights an ID has on the AD

<div class="ubbcode-block"><div class="ubbcode-header">Quote:</div><div class="ubbcode-body">Originally posted by cmccullough:
<span style="font-weight: bold">I'm not quite sure what information you are looking for. Can you give me a few specific examples?</span></div></div>

I would like to know the following (if possible):
1. Find out what an account has access to.
Example:
Account: jsmith
I would like to know he has rights to access which hosts, and what level of access does he have at these hosts.
2. Find out what network shares he is able to access.
Example:
Account: jsmith
I would like to know which network shares (on all hosts on the network) he is current accessible and what rights does he have, i.e. read, read/write, etc.

Thank you.

[cmccullough]

Re: How do export all the rights an ID has on the AD

You can get the share permissions, but I'm still not sure what you are looking for with the first one.

For share permissions you can use Exporter Pro to export all share permissions for your computers, then search the output file for JSMITH or whatever user you are interested in. In Exporter Pro you will use the Security Access export.