Hey TechRepublic regulars! I have recently taken a new job and am trying to make the best of a bad AD implementation. I have made considerable progress, but I’m stuck with groups. The organization has several groups that represent the same business unit (Distribution Lists, Security groups-sometime multiples of these). I am hoping to clean these up and remove the unnecessary groups. However, not being terribly familiar with the intricacies of the file server permissions and other areas that these groups are used (nested groups, etc), I’m very hesitant to make any changes.
I’m very curious if any of you know of a tool that can traverse the entire directory structure and all servers to report back where a group is used so I can make the appropriate changes so I don’t impact the network.
I’m sure the problem I’m describing isn’t a new one, so I’m equally sure that there is some kind of auditing tool that I’m unaware of. If any of you know of such a tool, I would love to hear from you.
Many Thanks,
W. M.
