tag:blogger.com,1999:blog-8661306268497101.post5689331239529079413..comments2014-10-31T04:22:05.593-07:00Comments on Active Directory Forestry: Active Directory ForestryBen.Phttp://www.blogger.com/profile/12138068040807100456noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-8661306268497101.post-73092441176939376032012-10-31T13:38:45.408-07:002012-10-31T13:38:45.408-07:00Hi Ben,
As Domain Admins / Enterprise Admins we o...Hi Ben,<br /><br />As Domain Admins / Enterprise Admins we often delegate administrative tasks in Active Directory and from time to time need to know who is delegated what access in Active Directory.<br /><br />In my experience, I have found that it <a href="http://active-dir-resultant-permissions.blogspot.com/2012/10/how-to-find-out-who-is-delegated-what.html" rel="nofollow">how to find out who is delegated what access in Active Directory</a> is not as easy as it seems, but in fact can be quite difficult.<br /><br />I've seen many admins try to use a <a href="http://port-389.blogspot.com/2012/10/permissions-analyzer-for-active.html" rel="nofollow">Permissions Analyzer for Active Directory</a> but finding out <a href="http://www.activedirsec.org/t43140051/how-to-audit-security-permissions-in-active-directory/" rel="nofollow">who has what permissions in Active Directory</a> is not the same thing.<br /><br />I recently came across an <a href="http://www.active-directory-audit-tool.com" rel="nofollow">Active Directory Audit Tool</a> that makes is super easy to find out <a href="http://goldfinger-active-directory-security-and-access-reporting-tool.paramountdefenses.com/2012/10/how-to-audit-delegated-access-rights-in.html" rel="nofollow">who is delegated what access in Active Directory</a>. Thought you may like to know.<br /><br />Cheers,<br />Bob<br /> Bobhttps://www.blogger.com/profile/11059530674720282458noreply@blogger.comtag:blogger.com,1999:blog-8661306268497101.post-85188548366177379022012-10-31T13:07:58.306-07:002012-10-31T13:07:58.306-07:00Hi Ben,
I think of Active Directory Security as b...Hi Ben,<br /><br />I think of <a href="http://www.activedirsec.org" rel="nofollow">Active Directory Security</a> as being critical to business these days and <a href="http://www.active-directory-auditing-tool.com" rel="nofollow">Active Directory Auditing</a> is very important.<br /><br />Personally, I've found that the need to audit what is being audited in Active Directory is equally important as well.<br /><br />I recently came across a cool <a href="http://www.active-directory-acl-exporter.com" rel="nofollow">Active Directory ACL Export/Dump Tool</a> and have been using it for these audits.<br /><br />I thought you might find my experience with <a href="http://windows-security-log-events.blogspot.com/2012/10/how-to-audit-find-out-what-is-being.html" rel="nofollow">How to audit / find out what is being audited in Active Directory</a> helpful so thought of sharing it with you.<br /><br />Adios,<br />WillWill.Rhttps://www.blogger.com/profile/02328547654892503316noreply@blogger.com