Hello,
I am trying to resolve a permissions issue in AD and am looking for a way to unravel what's being applied. If I look at the Effective Permissions of a given user, it shows me a list what's explicitly allowed and not allowed. What I would like to see is the same list, only showing from where that permission is being applied, much like the group policy modeling tool. If I see that a user cannot create a computer object, I want to see where that is being denied.
Is this even possible? Thank you for your time.
Eric