Delegation of control in AD

brsexton · 01-12-2009, 01:58 PM

Hello all,

I was wondering if someone could tell me how to find out what users/groups have been delegated to a certin OU in active directory? I have some groups and users that I know have been delegated to come OU's, but I can't find out which OU's or what rights they were given. Can someone help me figure this out?

brsexton · 01-13-2009, 09:20 AM

anyone?

johnej · 01-13-2009, 09:25 PM

I can try to help...I am not quite sure if this is exactly what you are looking for. but you can give this a shot.

1.) Go to Active Directory Users and Computers
2.) Go to menu "View" and enable "Advanced Features"
3.) Now find one of the users and check his/her properties. You'll see that there will be an additional tab called "Object", which shows the cannonical name. Which in turn will show the tree to the OU.

Hope that helps...

**bilbus** · 01-16-2009, 05:47 PM

the tab you are looking for is "security" not object though.

Look on the OU's security tab (properties) the list should have a few default groups and any accounts that have been given permision to that OU.

It will look like normal NTFS permisions, but if you goto advanced security, you will see a long list of permisions, anything checked allow will be something the user can do in AD on that OU.

John is correct, if you dont enable advanced features, the security tab will be missing.

01-12-2009, 01:58 PM	#1 (permalink)
brsexton Registered User Join Date: Oct 2008 Posts: 5 OS: Server 2003	Delegation of control in AD Hello all, I was wondering if someone could tell me how to find out what users/groups have been delegated to a certin OU in active directory? I have some groups and users that I know have been delegated to come OU's, but I can't find out which OU's or what rights they were given. Can someone help me figure this out?

01-13-2009, 09:20 AM	#2 (permalink)
brsexton Registered User Join Date: Oct 2008 Posts: 5 OS: Server 2003	Re: Delegation of control in AD anyone?

01-13-2009, 09:25 PM	#3 (permalink)
johnej Registered User Join Date: Jan 2009 Posts: 14 OS: xpsp3	Re: Delegation of control in AD I can try to help...I am not quite sure if this is exactly what you are looking for. but you can give this a shot. 1.) Go to Active Directory Users and Computers 2.) Go to menu "View" and enable "Advanced Features" 3.) Now find one of the users and check his/her properties. You'll see that there will be an additional tab called "Object", which shows the cannonical name. Which in turn will show the tree to the OU. Hope that helps...

01-16-2009, 05:47 PM	#4 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 949 OS: OS2 Warp	Re: Delegation of control in AD the tab you are looking for is "security" not object though. Look on the OU's security tab (properties) the list should have a few default groups and any accounts that have been given permision to that OU. It will look like normal NTFS permisions, but if you goto advanced security, you will see a long list of permisions, anything checked allow will be something the user can do in AD on that OU. John is correct, if you dont enable advanced features, the security tab will be missing. Last edited by bilbus; 01-16-2009 at 05:48 PM.