Greetings,

Before I give up on this I thought I'd ask the brains-trust :-)

Problem:

Two "service" accounts in different domains to support the same application
require identical rights and privileges. After deployment one works and the
other doesn't. It is suspected that one of the rights assigned through
group Policy in each domain is different.

Idea:

Create an application that will take a user as an input and will go through
the process of listing all the groups that the users is a member of and
what rights and privileges the user gets from each group membership.

Roadblock:

Damned if I can find a dot Net library that will let me enumerate the
rights and privileges for a domain entity. I'm looking for things like "Log
on Locally" (SeInteractiveLogonRight) and his friends.

My Google-fu has failed me :-( Although there is some suggestion that this
is not possible and the poor server administrator will need to do it all
through disparate GUI interfaces making manual notes as they go along.

Anyone done this or knows what classes I need to look at?

-- 
Regards,
noonie

P.S. the original problem was solved by the server admin going through the
GUI interfaces and taking manual notes ;-)

Reply via email to