Is there a utility that can determine what our AD security groups grant access to?

We are migrating out NT 4.0 network to Windows 2000/Active Directory. We have tons of security groups, but no one knows to what they grant access. Is there a utility that will either tell me what these groups give access to or scan the domain (servers) and tell me where these groups are granting access?
You might be looking for something like Security Explorer, which does exactly the sort of thing you're talking about.

This was first published in February 2003

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.