Sometimes, rebuilding OUs is not a Bad Idea :)
Try DSacls or something GUI-sh from Netpro and co.
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.com - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday?
-anon
From: Casey Robertson
Sent: Tue 1/23/2007 2:33 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Security Auditing
We are embarking on a project to clean up our OUs structure and reassign
permissions that have grown unmanageable over time. To accomplish this it
would be nice to be able to dump permissions on all OU objects and individual
object types (users, computers, etc) so that we can determine who has rights to
what. The prospect of doing this manually is daunting at best and for the most
part I have only seen 3rd party tools (read: expensive) that do this in an easy
to use fashion.
Any suggestions for tools, scripts etc would be appreciated. Either that or we
can rebuild our OU structure J
Casey Robertson
