Question : AD Delegation Report

Hi,

just heritate of a new forest ( the sysadmin is gone ). there is a lot of OU , sites, etc...

I whant to be able to verify ( and list ) delegation control over each domain, is there a way ?
I don't whant to go on each OU and check the security, whant only to get an output report .

It's a Windows 2000 Native AD.

thanks

Answer : AD Delegation Report

You can use dsrevoke to get permissions http://www.microsoft.com/technet/abouttn/flash/tips/tips_120704.mspx

There are other good links if you google dsrevoke.

One program I like is an EE home brewed program that came about from a question here

http://www.experts-exchange.com/Programming/Languages/Visual_Basic/VB_Script/Q_25342771.html

Very cool and good work by jostrander on that one.  I've used that myself.

To be honest this is one of the areas AD can improve on - delegation and reporting on delegation.

Thanks

Mike