It could be written...but it would be "expensive" in terms of processing resources.
________________________________ From: James Rankin [[email protected]] Sent: Wednesday, May 13, 2009 7:54 AM To: NT System Admin Issues Subject: Re: AD groups search to find out where group is all applied in domain If such a tool exists, I sure would have liked to have had it when I worked for Quantum :-) You could maybe try using the command-line version of dumpsec.exe to drop a permissions report on a list of fileservers and pull out those entries with a specified group name, but it would probably take a very long time to run 2009/5/13 Bill K <[email protected]<mailto:[email protected]>> I have AD groups I would like to do a "reverse lookup" to find out all the servers/shares that the group is applied on within the domain. This would be a great tool for finding out what legacy AD groups give access to if it was never documented. Does anyone know how to do this? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
