Reporting on active directory delegate permissions

[Mhairi]

Is there a way to report on the delegate permissions which are on each object/OU within active directory? and/or is there a way to obtain a listing of objects/containers where inheritance is not switched on? I am currently experiencing an issue where certain users do not have 'allow inheritable permissions' and I am trying to figure out if I can get a report using Hyena which can make this easier for me.

Many Thanks

[cmccullough]

Re: Reporting on active directory delegate permissions

As far as I can tell, the instructions in this post would be the only solution:

http://www.systemtools.com/toolboard/showthread.php?1727-reporting-AD-delegation

[Mhairi]

Re: Reporting on active directory delegate permissions

Hi there, Many thanks for your reply this has been most helpful. However, I think what I also need to know is - Can I get a listing of the security permissions within active directory per user - i.e the actual a.d object permissions? and, if there is a way to see if they are being inherited?
Many Thanks

[cmccullough]

Re: Reporting on active directory delegate permissions

If you mean a breakdown of permissions that each user has to other AD objects, no I don't have a way to do that. If you want to see what AD permissions have been applied to the users objects themselves, you can select users in the right window, then right-click and choose Account Functions->List Directory Security.