Results 1 to 6 of 6

Thread: Can i browse active directory without being Administrator?

  1. #1
    Join Date
    Feb 2006
    Posts
    167

    Can i browse active directory without being Administrator?

    Can anyone tell me how to browse active directory incase I am just a regular user? I normally do database work and want to get information on which groups contains which users or to which groups this user belongs too. I am on Vista operating system by the way. Thanks.

  2. #2
    Join Date
    Nov 2005
    Posts
    631

    Re: Can i browse active directory without being Administrator?

    Well, it usually depends on the permissions in your directory, you can ask your directory admin about delegating you necessary permissions on objects which are in scope of your work.

  3. #3
    Join Date
    Jan 2006
    Posts
    605

    Re: Can i browse active directory without being Administrator?

    I guess that you could use the Windows Server 2008 Remote Server Administration Tools for Windows Vista Service Pack 1, it has the ability to use MMC snap-ins depending on level of GPO restrictions in your orgranization, download it from here - http://support.microsoft.com/kb/941314

  4. #4
    Join Date
    Jun 2006
    Posts
    623

    Re: Can i browse active directory without being Administrator?

    You can try to use VBScript or PowerShell programs to enumerate the direct members of a group that could be:

    Set objGroup = GetObject("LDAP://cn=MyGroupName,ou=West,dc=MyDomain,dc=com")
    For Each objMember In objGroup.Members
    Wscript.Echo objMember.sAMAccountName
    Next

    Also try out the VBScript program to enumerate the groups a user is a direct member of:

    Set objUser = GetObject("LDAP://cn=TestUser,ou=West,dc=MyDomain,dc=com")
    For Each objGroup In objUser.Groups
    Wscript.Echo objGroup.Name
    Next

    And also try to test if a specific user is a member of a specific group:

    Set objUser = GetObject("LDAP://cn=TestUser,ou=West,dc=MyDomain,dc=com")
    Set objGroup = GetObject("LDAP://cn=MyGroupName,ou=West,dc=MyDomain,dc=com")
    If (objGroup.IsMember(objUser.AdsPath) = True) Then
    Wscript.Echo "User " & objUser.sAMAccountName _
    & " is a member of group " & objGroup.Name
    Else
    Wscript.Echo "User " & objUser.sAMAccountName _
    & " is NOT a member of group " & objGroup.Name
    End If

  5. #5
    Join Date
    Dec 2008
    Posts
    2

    Re: Can i browse active directory without being Administrator?

    You can browse Active directory with a regular user, there is a free browser which you can use to browse active directory active directory browser - click the download center and at the bottom there is free browser download
    Last edited by john89; 13-03-2009 at 10:45 PM.

  6. #6
    Join Date
    Jan 2006
    Posts
    3,792
    Incase no administrator has restricted or denied it, then any user can view Active Directory information. Since you are on Vista OS, then install the RSAT tools from this link -
    http://www.microsoft.com/en-us/downl....aspx?id=21090

Similar Threads

  1. Lock administrator directory on Ubuntu
    By Snowie in forum Operating Systems
    Replies: 5
    Last Post: 24-07-2011, 10:22 AM
  2. How to use ldp.exe in Active Directory
    By Aanand in forum Active Directory
    Replies: 3
    Last Post: 19-11-2010, 05:06 AM
  3. Replies: 5
    Last Post: 22-05-2010, 07:33 AM
  4. How to take backup of Active Directory
    By Matrix316 in forum Operating Systems
    Replies: 3
    Last Post: 15-10-2009, 11:45 AM
  5. Active Directory and DMZ
    By maketu in forum Windows Security
    Replies: 1
    Last Post: 19-02-2008, 02:27 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,750,836,713.28040 seconds with 16 queries