Which user has what permissions in AD

Greeting Folks
, is there a way to find out which user has what permissions in the entire domain? Are there any tools / software
that can be leveraged to get such information.

Hi,
Based on my knowledge, you need to use PFDavAdmin Tool to open mailboxes and verify the folder permission of calendar on Exchange 2007. Since the Get-MailboxFolderPermission cmdlet is unavailable for Exchange 2007.
In Exchange 2010, the most suitable command should be "MailboxFolderPermission" for calendar permission. If you would like to check the permissions that user2 has to view user1's calendar, you can use the following cmdlet:
Get-MailboxFolderPermission -Identity "User1:\Calendar" -User User2
What's more, you can use the Get-Mailbox | Get-MailboxfolderPermission cmdlet to query the permissions of all the folders.
Get-Mailbox | Get-MailboxfolderPermission
Hope it helps.
Best regards,
Amy
Amy Wang
TechNet Community Support

Similar Messages

How to find out which user has the permission to execute startsap ?

Hi All
How do I find out which user has the permission to execute the startsap and stopsap? Do I control the permission on those script using windows standard authorization? For example: only allow certain user have the read and write permission?
Thank you.!
Vincent Lo

Well to me this is really weird question..
<b>noone un-authorized should have access to OS on your system</b>
If this is valid you do not need to solve problems who can and who cannot start/stop SAP, because if you want to prevent some users from shutting down the SAP you have really hard job to do - there are many ways how to kill the SAP (for example killing relevant process from task manager, killing of database, messing with services etc.) - yes, this is harmful way of stopping SAP, but we are talking about attack, right? I would contact some Windows specialist to help you disable all the ways how to harm the running SAP. But still after that - there are many files that can be modified/deleted so SAP will crash after restart - you need to protect them too, etc.
In case you take the first assumption as granted (and you really limit access to this server) you do not need to worry who can stop or start SAP - at the other hand it may be handy to be able to start/stop SAP from other users - for this you can run the stop/start script "under different user".
But to answer the question - to me this is question just of access control (but really never tried that myself):
<a href="http://technet2.microsoft.com/WindowsServer/en/library/c6413717-511e-42bd-bd81-82431afe4b2a1033.mspx">Permit or restrict access to a snap-in for a domain</a> (or see other related links down there on this page)
Please award points for useful answers.
Thanks

The current user has insufficient permissions to perform this operation when trying to add Term stored managed navigation.

Hi,
i am getting this error "The current user has insufficient permissions to perform this operation." when trying to add the Term store managed navigation like the following screen shot. i am the Farm
administrator and as well managed services account. also noticed, cannot delete the service application, saying you don't have enough permission to delete the db. but using this account i was able to do everything before in my environment. is anyone already
face this kind of error, so what will be the way to resolve this?
Appreciated!

event though its a farm admin,It should provide the access to MMS.please find the below link for more details and the solution for the issue.
Go to SharePoint Central Administration Site –> Application Management –> [Service Applications] –> Manage service applications
2.   Highlight the Managed Metadata Service that your web application is associated with. (Do not click on the link, just click somewhere else on that row to highlight it)
3.   Click on Permissions button in the ribbon area.
4.   Add the application pool account used by your web application and give it ‘full Access to Term Store’
5.   Click OK.
http://expertsharepoint.blogspot.de/2014/08/managed-metadata-service-or-connection.html
Anil Avula[MCP,MCSE,MCSA,MCTS,MCITP,MCSM] See Me At: http://expertsharepoint.blogspot.de/

SharePoint C# Get list of sites on which user has permission (Read, Contribute, Owner, Admin, Visitor)

HI,
I wants to get list of sites on which user has permission, all permission name like (read, visitor, contribute, owner)
using (SPSite oSite = new SPSite(SPContext.Current.Site.Url))
foreach (SPWeb oWeb in oSite.RootWeb.GetSubwebsForCurrentUser())
permission = string.Empty;
foreach (SPGroup group in oWeb.Groups)
foreach (SPUser u in group.Users)
if (u.Name == (userName))
foreach (SPRole role in u.Roles)
permission += role.Name.ToString() + ", ";
} // Taking All Permission details of user
permission = " [" + permission.TrimEnd(", ".ToCharArray()) + "]";
my final string variable will have values like [Read, Visitor] or [Read] or [visitor, Read]
I wants to have all permission names and also geting error on u.Roles [Roles is absolute now],
Help me to get permission by using SPRoleDefination etc
SPRoleDefinitionCollectionroleDefinitions
= oWeb.RoleDefinitions;
SPRoleDefinitionroleDefinition
foreach(SPRoleAssignmentroleAssigment
inoWeb.RoleAssignments)
Thanks
Praveen

Depending on how large your farm is and how many webapplications / site collections you need to enumerate to build this list, you might be better off using search to get the list of sites/webs that the user has access to (search results are security trimmed).
You could then enumerate just the list of sites returned to determine the exact permissions.
E.g. Code for getting a list of sites the user has access to:
var ssaProxy = (SearchServiceApplicationProxy)SearchServiceApplicationProxy.GetProxy(SPServiceContext.GetContext(SPContext.Current.Site));
var keywordQuery = new KeywordQuery(ssaProxy);
keywordQuery.RowLimit = 200;
keywordQuery.SelectProperties.Clear();
keywordQuery.SelectProperties.Add("Title");
keywordQuery.SelectProperties.Add("Url");
keywordQuery.ResultsProvider = SearchProvider.Default;
keywordQuery.QueryText = String.Format("contentclass:STS_Site OR contentclass:STS_Web");
keywordQuery.ResultTypes |= ResultType.RelevantResults;
ResultTableCollection searchResults;
searchResults = keywordQuery.Execute();
if (searchResults.Exists(ResultType.RelevantResults))
var searchResult = searchResults[ResultType.RelevantResults];
var results = new DataTable { TableName = "SearchResults" };
results.Load(searchResult, LoadOption.OverwriteChanges);
if (results.Rows.Count > 0)
var resultsText = new StringBuilder();
foreach (DataRow dataRow in results.Rows)
var urlToWeb = dataRow["Url"] as String;
//Perform your checking to determine the exact permissions
Regards, Matthew
MCPD | MCITP
My Blog
Please remember to click "Mark As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.
I just added a webpart to the TechNet Gallery that allows administrative users to upload, crop and format user profile photos. Check it out here:
Upload and Crop User Profile Photos

Find which user has "Personal Greeting"

Dear NetPro gurus,
Is there any tools that can help my customer to view at a glance which user has used Personal Greeting, and which are just using System Default greeting??
One of my customers has over 1,000 users and I was wondering whether such tool exist rather than having me to click on each user mailbox one-by-one.
I did tried to export using Bulk Administration Tool as well as using User Dump Tool but neither allows me to see who has used Personal Greeting on their mailbox.
I have spent a lot of time research on this already. Would greatly appreciated if anyone can shed some light on this.
Cheers,
Hunt

You had a previous post on this in which I provided the following:
When you run the Subscriber Information Dump for Unity, you have the option to pull the WAV file info for greetings as well as data for which greeting(s) are enabled. When you do that, you would be able to see the following:
Greeting WAV file – standard. This will include the WAV file name of the standard greeting for a subscriber. The WAV file itself is copied into the same directory where you select the CSV File to be written to so be sure to pick a directory that has enough space to store all the greeting files. The file will be named with the alias of the subscriber followed by “_GREETING_STANDARD.WAV”. If there is no standard greeting recorded for the subscriber, the column will be empty. If there is a standard greeting it will be copied to the output directory as noted and the file name used will be written in the column.
I haven't looked at this data for the purpose you intend but the standard (and alternate) greetings are the most commonly used. When you set up your mailbox, it asks you to record a personal greeting (this would be the Standard greeting). If you do not record a personal greeting then the system default would be used. So, if I have a personal greeting then the applicable Greeting WAV file output in the subscriber dump should be populated. Otherwise, it would be blank. Should be easy for you to test and verify if this is the case.
I think this will give you what you need. Did you take a look at this data yet?
Hailey
Please rate helpful posts!

How to find out which user has locked a particular record of a table

Hi
Is it possible to know - which user has locked a particular record (I know the primary key of the record) of a table
Regards

select     OS_USER_NAME os_user,
     PROCESS os_pid,
     ORACLE_USERNAME oracle_user,
     l.SID oracle_id,
     decode(TYPE,
          'MR', 'Media Recovery',
          'RT', 'Redo Thread',
          'UN', 'User Name',
          'TX', 'Transaction',
          'TM', 'DML',
          'UL', 'PL/SQL User Lock',
          'DX', 'Distributed Xaction',
          'CF', 'Control File',
          'IS', 'Instance State',
          'FS', 'File Set',
          'IR', 'Instance Recovery',
          'ST', 'Disk Space Transaction',
          'TS', 'Temp Segment',
          'IV', 'Library Cache Invalidation',
          'LS', 'Log Start or Switch',
          'RW', 'Row Wait',
          'SQ', 'Sequence Number',
          'TE', 'Extend Table',
          'TT', 'Temp Table', type) lock_type,
     decode(LMODE,
          0, 'None',
          1, 'Null',
          2, 'Row-S (SS)',
          3, 'Row-X (SX)',
          4, 'Share',
          5, 'S/Row-X (SSX)',
          6, 'Exclusive', lmode) lock_held,
     decode(REQUEST,
          0, 'None',
          1, 'Null',
          2, 'Row-S (SS)',
          3, 'Row-X (SX)',
          4, 'Share',
          5, 'S/Row-X (SSX)',
          6, 'Exclusive', request) lock_requested,
     decode(BLOCK,
          0, 'Not Blocking',
          1, 'Blocking',
          2, 'Global', block) status,
     OWNER,
     OBJECT_NAME
from     v$locked_object lo,
     dba_objects do,
     v$lock l
where      lo.OBJECT_ID = do.OBJECT_ID
AND l.SID = lo.SESSION_ID
hope this helps
Zekeriya

How to determine which user has an Access 2013 databse open

How can I tell which user / PC has opened a Backend Access database?

If the file is stored on a server and you have access to it, you could check in Computer Management, then go into System Tools, Shared Folders, Open Files, and you should find the file listed there along with which user has it open currently.

User has no permissions / error exporting technical system SLD

Hello everybody,
after not using the export function more than one year, i now wanted to export a technical system from the sld of our XI system (WebAS 7.00 Servicepack 14.4). When I try to export the system I get the following message:
User has no permissions. Cannot connect (check stacktrace for details), (service=com.sap.tms)
Does anyone have the same problems? I have all the group and roles:
SAP_SLD_GUEST-> LcrUser
SAP_SLD_DEVELOPER -> LcrInstanceWriterNR
SAP_SLD_CONFIGURATOR-> LcrInstanceWriterLD and LcrInstanceWriterNR
SAP_SLD_ORGANIZER ->LcrInstanceWriterAll
SAP_SLD_ADMINISTRATOR ->LcrAdministrator
SAP_SLD_DATA_SUPPLIER ->DataSupplierLD
SAP_SLD_SUPPORT ->LcrSupport
Any ideas?
Regards
Michael

Hii
You need the authorization for login in SLD as admin for technical system export - SAP_SLD_ADMINISTRATOR
Follow this link for compete details:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/9e76e511-0d01-0010-5c9d-9f768d644808
All the XI Roles and description of the same here is in this link, check it out
http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm

Which user has which authorizations

Hi all,
I need to know which user has which authorizations.
In which tables can I find these data?
Thanks.
deniz.

Hi,
Check this .
USR01 contains the runtime data of the user master records
USR02 is the table containing logon information such as the password
USR03 includes the users' address information
USR04 contains users' authorizations
USR05 is the users' parameter ID table
USR09 contains user menus
USR10 is the table for user authorization profiles
USR11 contains the descriptive texts for profiles
USR12 is the user master authorization values table
USR13 contains the descriptive short texts for authorizations
USR14 contains the logon language versions per user
USR30 includes additional information for user menus
USH02, USH04, USH10 and USH12 contains Users and profile and
authorization change history data.
Tables related with authorizations objects and authorization fields are as follows:
TOBJ is the authorization objects table containing the authorization
fields for each.
TACT contains the list of standard activities authorization fields
in the system.
TACTZ is the table which defines the relationship between the
authorization objects and the activities in those objects containing
the Activity authorization field.
TSTC is the transaction code table where authorization objects
and values can be defined.

How to find which users has used external scripting

I want to find out the users who used the scripting for doing any mass changes activity.

Hi Murphy;
Please check which user has which forms open? and Re: how to determine which forms are currently open?
Hope it helps you in your issue
Regard
Helios

How to check which user has the privilege to execute a stored procedure?

I am using Oracle 7 and I would like to check which user has the privilege to execute a stored procedure. How can I check it? Is there any view I can query for?
Alex Hung

Please check DBA_SYS_PRIVS.
SQL> select * from dba_sys_privs
2 where grantee='HARY';
GRANTEE PRIVILEGE ADM
HARY EXECUTE ANY PROCEDURE NO
....

Log to check as to which user has accessed which report?

Hi,
I am using BOBJ for report creation and SAP BI for datawarehousing.
The user can access these reports using the iviews created in the portal. Due to some performance testing requirements we need to check which user accessed which report and if he has drilled down to a particular level in a report, then there should be a means to know that as well.
BO offers a few standard activity reports to check which user has done which activity. However the details of drill down etc. cannot be checked using that. Please help as to how can we check that too.
Best Regards,
Neha

Hi,
See [Business Objects|/community [original link is broken]; and [Crystal Reports|/community [original link is broken]; forums for this topic.
-Paul

Is it possible to determine which user has opened a PDF on a network?

Hi Everyone.
We frequently have a situation where users open PDFs saved on the network with Acrobat, and then leave them open.
Then if other users need to edit the same PDF, they have no way of knowing the PDF is locked until they try to save and get this error:
"...The file may be read-only or another user may have it open... "
In this situation it would be useful to be able to interrogate the locked PDF to see which user has locked it open, and maybe to even force close the open session.
Does anyone know if any of this is possible?
Many thanks in advance.
Cheers,
Andy

It's not something that Acrobat can show. File 'locks' in Acrobat are not controlled by the application as they are in programs such as Word or InDesign - which write a lockfile to the folder - instead we rely on the server OS to flag each file. Information on who is accessing a file on a network share is only available at operating system level via the machine which hosts the share (e.g. via a net session command).

Need to know which user has locked the table.

hi ,
We are using a table named fm_sec_dict .when we try to disable the triggers and insert data into the table and enable the triggers asociated with the table.after inserting ,we are getting a message
RESOURCE BUSY ACQUIRED NO WAIT option.
please give the querry to find which user and what SID is using the Table ,so that we can kill the session.
so that other users can work with out any obsturctions.
thanks in advance...........

Check in OEM.

To find which user has clicked on which link in capmaign mail

When a campaign is executed we send a mail to the BPu2019s.now I have couple of link in that mail formu2026.I want to know which person has clicked on a what hyperlinku2026for e.g. I have two link one for sending to yahoo and other for my site addressu2026now i want to know how which person has clicked on which link...
in the Table CRMD_IM_ML_ITEM field SUM_ACCESS increases by 1 every time a person clicks on the link.....
is there any table taht i can use to know which kyper link the user has clicked.....
i read about the adding response id to the mail form.....but don't how or where to use it...
i need to genrate report later which tells which person has clicked on which link,how many number of time...

We have a same scenario.could you please tell us the way you resolved it.
Thanks
Ramya

Which user has what permissions in AD

Similar Messages

Maybe you are looking for