combination of dsquery ou and dsacls.exe should help you, currently I
dont have access to DC to give you the exact syntex.
But, I have a batch job running with DSACLS, every weekend to list
down the ACLS on each and every OU in domain. it saves individual
files for each OU.
something like,
for /F "Tokens=1* Delims=*" %A in ('dsquery ou') do dsacls %A > "%A".log
This will first create a list of all OU's and supply it to dsacls.exe
as input, whose output i.e. actual ACLS will be stored in the text
file with name as OU.
On 8/30/05, Mark Parris <[EMAIL PROTECTED]> wrote:
> Hi,
>
> What utility can I use to list the entire OU structure for a Domain and all
> permissions set on each OU?
>
> I can manage to do it for a single OU but not say set it to DC=X,DC=Y and
> dump the whole structure.
>
> Regards
>
> Mark
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
--
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Fortune and Love befriend the bold"
~~~~~~~~~~~~~~~~~~~~~~~~~~~
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
