How to use dsacls to find out where all a security group is granted permissions in Active Directory?
Hello. I would like to know exactly how to use the Microsoft dsacls.exe tool to find out where all a particular domain security group has "Reset Password" permissions in our OU?
We are trying to find out who can reset the password of our user accounts, and unfortunately it is not as easy as one would have thought. I am thinking that perhaps with dsacls, this should be doable but I am not sure how to use dsacls to do so.
Any input or assistance would be appreciated. Thanks.