Tools for delegating and revoking permissions

How can you find out who has what delegated permissions/rights over AD objects. And more importantly, how can you edit those permissions, revoke some of them or just give out more permissions?
Delegated permissions are assigned using the Delegation of Control Wizard or by directly editing the object permissions. You can edit the object to remove permissions or add new ones. However, to see which ones someone has and to remove a lot of permissions automatically, use the dsrevoke.exe tool. You can download this by clicking here.
This was first published in December 2004
This Content Component encountered an error



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:



  • Virtual desktop security guide

    To secure virtual desktops, consider antivirus, certificates and network vulnerabilities. Just remember, VDI doesn't always ...

  • Guide to low-cost desktop virtualization

    In this guide, learn to virtualize desktops without spending more than you would when deploying PCs, and what VDI vendors are ...

  • VDI pilot project guide

    A VDI pilot project should start with a VDI project plan. Know what pitfalls to avoid and test product options to achieve a ...