Privilege Users Report

Question

Hi all,

Please advise how to get the privilage users report in Active Directory.

Regards

Answer 1

Hi @BAB

It depends on what is your definition of privileged users, as there are different levels and types of privileges in an AD environment.

1. Users that are members of the protected groups or admin roles: Account Operators
   Administrator
   Administrators
   Backup Operators
   Cert Publishers
   Domain Admins
   Domain Controllers
   Enterprise Admins
   Krbtgt
   Print Operators
   Read-only Domain Controllers
   Replicator
   Schema Admins
   Server Operators
2. Possible delegation models which assigns elevated rights via the Delegation Wizard\ACL Permissions to additional rights to AD objects
3. Possible delegation model for member servers and workstations.

Have a look at this page which has a number of predefined AD queries that can used to provide the answers to number 1.

https://nettools.net/predefined-ldap-queries/

Gary.