Hyena from http://www.systemtools.com/ is a great tool for doing this, in fact it can do a lot more =)
We use it for compliance reporting, we build up reports including folder ACL's, local group membership, and AD group membership including nested group membership. It has some pretty powerful filtering tools and can save objects so you can run multiple reports while only hitting your DC's once. I don't work for them, just a satisfied admin who likes the productivity boost from good tools =)
Thanks,
Andrew Fidel
| "Matt Hargraves"
<[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED] 08/01/2006 07:28 PM
|
|
This might be something that I can do with a combination of scripts, though I'm not sure where I'd get them from.
1) I need to be able to export a list of users (the userID is fine) with their group memberships. (AD objects)
2) I need to be able to export a list of groups with their list of members and memberships. (AD objects)
3) I need to be able to export a list of groups with their list of members and memberships. (NT objects)
Once I get all of that information, I need to 'connect the dots' between domains to determine overall group membership (across domains), including nesting. If the tool doesn't exist to do this last part I'm sure I can find someone to do the gruntwork of putting together a _vbscript_
to do the grunt work of it in Access or something like that.
Preferably all of this would go into CSV files so that it can go into Access or maybe pull it all into SQL.
Thanks for any help that can be provided.
