How can I back tack a Global Security Group?

[rsigari]

Greetings,
I am trying to find out if a group (Global group in this case) is being used to allow permission to any object accrosss AD Foreset. Is there any way that you could suggest that I can run such a query?

Regards,
RS

[cmccullough]

Are you looking for AD security, or files and directory security?

[rsigari]

Honestly, I want to trace it back wherever it might have been used. Idea is to clean up groups that are no longer in use.

[cmccullough]

Unfortunately there's no one-step solution for this request. The reason is that each object keeps it's own ACL, and therefore each ACL must be opened to search for the group you are trying to identify. For file and share permissions we have a white paper:

http://www.systemtools.com/kb/permissions_reporting.pdf

You'll see an option to specify the group(s) you want to search for. Keep in mind depending on the number of servers and computers, the number of files and directories, will determine how long it will take for a report like this to run.

[rsigari]

Thanks Chuck, that helps for the most part.