Acldiag Examples

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Acldiag Examples

Acldiag Overview | Acldiag Remarks | Acldiag Syntax | Acldiag Examples

Example 1: Display the ACL of a user object in Active Directory

To display the ACL of a user object in Active Directory, type:

acldiag CN="Test Admin",CN=Users,DC=domain1,DC=test,DC=fourthcoffee,DC=com

Example 2: Display a Schema Analysis of a Computer Object in Active Directory

To display a schema analysis of a computer object in Active Directory, type:

acldiag CN=MACHINE-TEST,CN=Computers,DC=domain1,DC=test,DC=fourthcoffee,DC=com /schema

Example 3: Display ACL, Permissions, and Delegation Information for a Computer Object

To display the ACL, the effective permissions for all users and groups in the security descriptor, and the delegation analysis of a computer object in tab-delimited format, type:

acldiag CN=MACHINE-TEST,CN=Computers,DC=domain1,DC=test,DC=fourthcoffeeDC=com /chkdeleg /geteffective:* /tdo

Example 4: Reapply a Delegation Template to a Group Object

To reapply a delegation template to a group object, type:

acldiag CN="Domain Computers",CN=Users,DC=domain1,DC=test,DC=fourthcoffee,DC=com /chkdeleg /fixdeleg

See Also

Concepts

Acldiag Overview
Acldiag Remarks
Acldiag Syntax
Alphabetical List of Tools
Search Overview
Replmon Overview
Repadmin Overview
Movetree.exe
Ldp Overview
Dsastat Overview
Clonepr Overview
ADSI Edit (adsiedit.msc)