active directory user permissions report

I would be grateful for any assistance since this is time and security sensitive for us. Someone pointed me to a tool called ADUCAdmin but that seems to falsely claim to do effective permissions.Ĭould someone kindly help me find a way to obtain this listing? Basically, I need to generate a list of all the modify **effective** permissions granted on the Domain Admins group object along with the list of all the admins to which these permissions are granted. I also looked at dsacls from MS but it doesn't do effective permissions. Plus, there is no way to export that information either. Now, we have more than a 1000 users in our environment so there's no way I can possibly enter 1000 user names one by one. The first was that it doesn't seem very accurate and the second was that it requires me to enter the name of a specific user, and it only shows me what it figures are effective permissions for that user.

I initially figured I'd use the Effective Permissions Tab in Active Directory Users and Computers but had two problems with it. I have been recently asked by my management to furnish a list of all the effective rights / permissions delegated on the Active Directory object for our Domain Admins group.

I'm new to Spice Works and was hoping to find an answer to a question that I have been struggling with for the past week or so.

Active directory user permissions report