By submitting your email address, you agree to receive emails regarding relevant topic offers from TechTarget and its partners. You can withdraw your consent at any time. Contact TechTarget at 275 Grove Street, Newton, MA.
How can you find out who has what delegated permissions/rights over AD objects. And more importantly, how can you edit those permissions, revoke some of them or just give out more permissions?
Delegated permissions are assigned using the Delegation of Control Wizard or by directly editing the object permissions. You can edit the object to remove permissions or add new ones. However, to see which ones someone has and to remove a lot of permissions automatically, use the dsrevoke.exe tool. You can download this by clicking