I need an AD tool to list of all users, groups and permission

Hello all,

I am on the hunt to find or see if there is an AD tool that will list all users, groups and permission. Is there such a tool? I would like to be able to export the data into a report. I am on a new AD project and I really don't want to have to do all or this report manually. I have MS Active Directory Explorer now, it's helpful but I am looking for even more detailed information tool for AD.

Thanks,
FMGT1999

Hello fmgt1999,

Yes there are some tools which you can access easily. According to your situations the best tools i can suggest you is csvde, ldifde, dsquery, or adfind.

Hope it helps.

Great, I have adfind but I will give the others a try...

Thanks,
FMGT1999

Better you can go with Microsoft's own command line tools such as dsquery, csvde, and ldifde but remember that these can be used for spitting out all users or all groups.

Apart from these, you can also search for command line help for dsquery, csvde, ldifde, and cacls at the dsquery requires W2k3. As well as you can also get syntax help online on the Microsoft site.

PRACL can list ACLs on actual resources. Actually that whole SuperCACLS suite is very useful. Since it's a commandline utility, it can also be used in a DOS For loop, etc. Especially if you use DFS extensively, SuperCACLS is a more viable toolset than what Microsoft offers.

And actually, I believe this is owned by Microsoft now....

Dave
GE