Permission/Delegation  of an OU/Domain-Quest One ActiveRoles Management Shell for Active Directory

Tested on 2008 & 2008 R2. It is quest pwershell & it is freeware. For viewing the AD objects permission/delegation ; you dont required any additional permission.

http://social.technet.microsoft.com/wiki/contents/articles/2308.quest-powershell-for-active-directory.aspx 

 
PowerShell
Edit|Remove
###------------------------------### 
### Author : Biswajit Biswas-----###   
###--MCC, MCSA, MCTS, CCNA, SME--### 
###Email<bshwjt@gmail.com>-------### 
###------------------------------### 
###/////////..........\\\\\\\\\\\### 
###///////////.....\\\\\\\\\\\\\\### 
Get-QADObject 'cn=users,dc=contoso,dc=com' -SecurityMask Dacl -sizelimit 0 | Get-QADPermission -Inherited -SchemaDefault | findstr / 'RAW'
 

 

Here "RAW" is a group name & that is case sensitive. See the below example.

 

 You can find the members of "RAW"

PowerShell
Edit|Remove
Get-QADGroupMember RAW
 

 

If you find this script somehow helpful ;provide the rating.