Cleaning Up Active Directory Groups

group cleanup thankless , time-consuming task , there no easy way it.  1 problem continiously face customer customer.  advise customers clearly mark group used under description field avoid domains getting state of having thousands of unknown groups.

i wondering if there third party tools have ability scan computer objects in active directory domain , enumerate security groups attached following items:

• files , folders
• local groups
• printers
• registry
• shares
• user prifles
• user rights
• sql permissions
• exchange mailbox permissions

this aid in process of cleaning unwanted security groups!  if not continue advising customers "change group security group distribution group, if breaks change back, if nothing breaks delete group".

kind regards,

---

clint boessen mvp - exchange server, mcse, mcitpx4, dip network engineering
perth, western australia

blog: http://clintboessen.blogspot.com/

please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

hello,

did think using sysinternals tools scan option?

security: http://technet.microsoft.com/en-us/sysinternals/bb795534

file , disk: http://technet.microsoft.com/en-us/sysinternals/bb545046

system information: http://technet.microsoft.com/en-us/sysinternals/bb795535

you not find tool able run needs @ once. scriptiing solutions should able extract required information domai machines.

---

best regards meinolf weber disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights.

Windows Server  >  Directory Services