Is there a way to find out what specific permissions a user has on
windows 2003? I have to local users that are in the administrators on
a local machine. One can do more than the other. Is there a tool I can
run to find out who is allowed to do what extra? This is very strange.
I do not want to go in every piece of software and every folder to
find out the differences

Are you running Active Directory on your 2003 server? Are we talking about
server folder shares that have user rights in question? If so, it does not
matter what 'local' pc rights the users have, the rights would be controlled
with security groups through your Active Directory Users console and you
could check there. As for what folders they or their security groups have
access to you could use the Xcacls utility to view this. The Xcacls
download and info is here... http://support.microsoft.com/kb/318754

Coraleigh Miller

"BillGatesFan" <klj_mcsd@hotmail.com> wrote in message
news:1185462762.617003.207670@19g2000hsx.googlegro ups.com...