ActiveDirSec.Org

The world's most trusted forum on Active Directory Security


Post Info TOPIC: Where can I download dsrevoke from?


Member

Posts: 14
Date: Jun 1, 2011
Where can I download dsrevoke from?
Permalink  
 


Hi. I would like to know where one can download the dsrevoke tool from Microsoft? We are trying to get rid of some permissions in our Active Directory and I read in a Microsoft white-paper that the dsrevoke tool can be used to do so.

Thanks.

-Manuel.



__________________
Eu amo futebol! Go Ronaldinho!


Member

Posts: 10
Date: Jun 15, 2011
Where can I download dsrevoke from?
Permalink  
 


You can download dsrevoke from Microsoft's website at - http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=19288

I should mention though that while it is a decent tool to remove permissions, it is not the best tool to find out where all a user/group has permissions, because I think it can only find where all a user/group has explicit permissions.

There are other tools you can use to find out where all users/groups have permissions, and of course to modify permissions, as you may know Microsoft's native tools do the job best.

/Simone



__________________

Women's eyes have pierced more hearts than ever did the bullets of war.



Member

Posts: 14
Date: Jul 20, 2012
RE: Where can I download dsrevoke from?
Permalink  
 


Hi Simone,

Thank you for the pointer. Sure, if you can share any additional pointers on good tools to analyze Active Directory permissions with, that would be helpful.

By the way, nice footer

Manuel.



__________________
Eu amo futebol! Go Ronaldinho!


Member

Posts: 10
Date: Jul 21, 2012
Where can I download dsrevoke from?
Permalink  
 


Manuel,

The most capable permission analyzer tool I know of for Active Directory is called Gold Finger for AD - www.paramountdefenses.com/goldfinger.

I say its the most capable tool because it offers maximum flexibility in terms of being able to specify what permission combination (e.g. Inherited Allow Reset Password Extended Right) you wish to find in your Active Directory, and it can find permissions granted to a user based on membership in security groups.

/Simone.



__________________

Women's eyes have pierced more hearts than ever did the bullets of war.

Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Post to Digg Post to Del.icio.us
Members Login
Username 
 
Password 
    Remember Me