Thanks Ken,

I'll have a play with *accesschk :-)*



On 31 July 2014 11:56, Ken Schaefer <k...@adopenstatic.com> wrote:

>  http://technet.microsoft.com/en-us/sysinternals/bb664922 is a fancier
> tool that can do something similar.
>
>
>
> *From:* ozdotnet-boun...@ozdotnet.com [mailto:
> ozdotnet-boun...@ozdotnet.com] *On Behalf Of *Ken Schaefer
> *Sent:* Thursday, 31 July 2014 11:53 AM
> *To:* ozDotNet
> *Subject:* RE: Enumerate user rights from Group Policy
>
>
>
> Whoami.exe /priv?
>
>
>
> Cheers
>
> Ken
>
>
>
> *From:* ozdotnet-boun...@ozdotnet.com [
> mailto:ozdotnet-boun...@ozdotnet.com <ozdotnet-boun...@ozdotnet.com>] *On
> Behalf Of *noonie
> *Sent:* Thursday, 31 July 2014 11:17 AM
> *To:* ozDotNet
> *Subject:* Enumerate user rights from Group Policy
>
>
>
> Greetings,
>
>
>
> Before I give up on this I thought I'd ask the brains-trust :-)
>
>
>
> Problem:
>
>
>
> Two "service" accounts in different domains to support the same
> application require identical rights and privileges. After deployment one
> works and the other doesn't. It is suspected that one of the rights
> assigned through group Policy in each domain is different.
>
>
>
> Idea:
>
>
>
> Create an application that will take a user as an input and will go
> through the process of listing all the groups that the users is a member of
> and what rights and privileges the user gets from each group membership.
>
>
>
> Roadblock:
>
>
>
> Damned if I can find a dot Net library that will let me enumerate the
> rights and privileges for a domain entity. I'm looking for things like "Log
> on Locally" (SeInteractiveLogonRight) and his friends.
>
>
>
> My Google-fu has failed me :-( Although there is some suggestion that this
> is not possible and the poor server administrator will need to do it all
> through disparate GUI interfaces making manual notes as they go along.
>
>
>
> Anyone done this or knows what classes I need to look at?
>
>
>
> --
>
> Regards,
>
> noonie
>
>
>
> P.S. the original problem was solved by the server admin going through the
> GUI interfaces and taking manual notes ;-)
>
>
>
>
>

Reply via email to