question

BAB-7997 avatar image
0 Votes"
BAB-7997 asked GaryReynolds edited

Privilege Users Report

Hi all,

Please advise how to get the privilage users report in Active Directory.

Regards

windows-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

GaryReynolds avatar image
0 Votes"
GaryReynolds answered GaryReynolds edited

Hi @BAB-7997

It depends on what is your definition of privileged users, as there are different levels and types of privileges in an AD environment.

  1. Users that are members of the protected groups or admin roles:

    Account Operators
    Administrator
    Administrators
    Backup Operators
    Cert Publishers
    Domain Admins
    Domain Controllers
    Enterprise Admins
    Krbtgt
    Print Operators
    Read-only Domain Controllers
    Replicator
    Schema Admins
    Server Operators

  2. Possible delegation models which assigns elevated rights via the Delegation Wizard\ACL Permissions to additional rights to AD objects


  3. Possible delegation model for member servers and workstations.

Have a look at this page which has a number of predefined AD queries that can used to provide the answers to number 1.

https://nettools.net/predefined-ldap-queries/


Gary.





5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.