Home > Active Directory > How to view and export Active Directory Delegated Permissions?

How to view and export Active Directory Delegated Permissions?

How to view and export AD delegate permissions assigned to an OU ?

Let’s check what’s the permission has been delegated to a OU.

View delegate permissions assigned to OU

1. Please open the ADUC and click View menu and check Advanced Features.

2. Please locate the specific OU and right click, then choose Properties.

3. Click the Security tab, click Advanced tab. All the permissions as well as the delegated permissions listed.

Export all permission assigned on specific OU to a text file

Moreover, we can use the dsacls tool to export all the security ACL on specific OU to a text file.

Please open a command prompt on the DC and run dsacls “<distinguish name of the ou>” > c:acl.txt

Syntax example:

For example, dsacls “ou=Marketing,dc=seneej,dc=com” > c:acl.txt

The dsacls tools is used for view and edit security ACL for AD objects.

Advertisements
  1. dsbyzx
    June 28, 2013 at 3:09 pm

    “Nice Post. It’s really a very good article. I noticed all your important points. Thanks”

  2. Nasir
    October 8, 2013 at 2:24 pm

    is it possible to export the complete list of permission that are possible with Delegation?

    • seneej
      October 9, 2013 at 5:10 am

      yes, Normally delegation is applied OU through delegation wizard.So if we want to check what’s the permission has been delegated on this OU, you can simply check the security tab of this OU.

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: