Hello, being newish to server administration i've come across a question i'm hopeing someone can help me with. Suppose on my network i have a security group called Tester1 and this group grants access to several programs, share folders, and email groups. Is there a tool that will allow me to view everything that Tester1 grants access to and generate a report of some sort.

Hi, Since we focus on Exchange here, we can use get-mailboxpermission get-adpermission to get the permission on user and mailbox. For the other permission, if there are store in AD, then you can try to use Get-Acl cmdlet to retrieve the security descriptor (access control list) for a file, a folder, or even a registry key. Using the Get-Acl Cmdlet http://technet.microsoft.com/en-us/library/ee176838.aspx Also we can use the Dsacls.exe tool (Dsacls.exe) to manage access control lists (ACLs) for directory services in Microsoft Windows Server 2003 How to Use Dsacls.exe in Windows Server 2003 and Windows 2000 http://support.microsoft.com/kb/281146 Regards,