Whoami.exe /priv? Cheers Ken
From: [email protected] [mailto:[email protected]] On Behalf Of noonie Sent: Thursday, 31 July 2014 11:17 AM To: ozDotNet Subject: Enumerate user rights from Group Policy Greetings, Before I give up on this I thought I'd ask the brains-trust :-) Problem: Two "service" accounts in different domains to support the same application require identical rights and privileges. After deployment one works and the other doesn't. It is suspected that one of the rights assigned through group Policy in each domain is different. Idea: Create an application that will take a user as an input and will go through the process of listing all the groups that the users is a member of and what rights and privileges the user gets from each group membership. Roadblock: Damned if I can find a dot Net library that will let me enumerate the rights and privileges for a domain entity. I'm looking for things like "Log on Locally" (SeInteractiveLogonRight) and his friends. My Google-fu has failed me :-( Although there is some suggestion that this is not possible and the poor server administrator will need to do it all through disparate GUI interfaces making manual notes as they go along. Anyone done this or knows what classes I need to look at? -- Regards, noonie P.S. the original problem was solved by the server admin going through the GUI interfaces and taking manual notes ;-)
