tag:blogger.com,1999:blog-3920347219421157797.post5270173852102657597..comments2024-03-27T21:55:28.163-07:00Comments on Clint Boessen's Blog: LDAP Queries for Group ScopeClint Boessenhttp://www.blogger.com/profile/11156487394562821934noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-3920347219421157797.post-18990739010665910692009-11-07T23:22:58.719-08:002009-11-07T23:22:58.719-08:00Jonathan thanks muchly for that post... That is ex...Jonathan thanks muchly for that post... That is exactly what I was aiming to do, find out any groups nested inside other groups. In the end I did write a script to do this, but I binned it as I found out the ADMT tool is capable of producing such data as well. I will definately have a look at Gold Finger however, thankyou very much for the information.Clint Boessenhttps://www.blogger.com/profile/11156487394562821934noreply@blogger.comtag:blogger.com,1999:blog-3920347219421157797.post-29806600742742050962009-10-28T15:30:47.642-07:002009-10-28T15:30:47.642-07:00Hi Clint,
Thanks for sharing your insightful thou...Hi Clint,<br /><br />Thanks for sharing your insightful thoughts and suggestions - very helpful, and appreciated indeed.<br /><br />On a related note, we needed a quick and efficient way to enumerate nested security groups for security audits (i.e. find out which groups were nested in other groups.) So we asked our on-site MS consultant and he recommended using the Gold Finger from Paramount Defenses Inc.<br /><br /><b>Gold Finger</b> pleasantly surprised us because not only was it endorsed by Microsoft but also 100% FREE and loaded with almost 250 useful Active Directory security, Exchange and ACL management reports. BTW, you can download it for free from <a href="http://goldfinger.paramountdefenses.com" rel="nofollow">http://goldfinger.paramountdefenses.com</a><br /><br />Thought I'd share this with you incase it could help you too, especially if you're into AD security reporting - there's no need to write LDAP filters anymore :-)<br /><br />Thanks again, and looking forward to your next post.<br /><br />Best wishes,<br />JonathanAnonymousnoreply@blogger.com