How to export AD object ACL

[TheJoel]

Sponsored Links

Hey guys, I need some urgent help. Due to some reason in need change the ACL of a group. I know how to do that but before doing the same I would like to know if I can export the this info in safe so that I can use it again if required in future. Is there any manual way or a tool which can do this job?

Please let me know soon.

[Gregoryl]

If i'm not wrong, you are talking about the Group membership. If yes, you can use ldifde or CSVDE for the same.

Or alternatively you can also search on Microsoft sites for any MS Script center for different scenarios.

[Domi.nick]

Hello TheJoel, you can use DSACLS and ADFIND to export the DACL from the object.. As far as importing is concerned, i dont think it is possible using either tool. Hopefully you will require to configure the DACL manually until it is the same as the export

[TheJoel]

Thank you very much for the help guys. DSACLS did the job, thanks a lot!

C:\>dsacls cn=test1,dc=mydomain,dc=net