Friday, 13 September 2013

What security groups do you belong to within Active Directory?

If you want to see what security groups you belong to within Active Directory open up a command prompt and run the following:

gpresult /V


This is really useful if you are having problems installing a piece of software (such as MS Dynamics CRM) and are hitting weird security problems. Quite often when installing Dynamics CRM you will have asked for and believe you have domain administrator rights, but the installer keeps telling you something like:

Action Microsoft.Crm.Setup.Server.GrantAspNetServiceAccountAccessAction failed. ---> System.Runtime.InteropServices.COMException: The security ID structure is invalid


Running the above command will give you a nice list of exactly what you have:

The user is a part of the following security groups
---------------------------------------------------
    Domain Users
    Everyone
    SophosUser
    BUILTIN\Users
    BUILTIN\Administrators
    Remote Desktop Users
    NT AUTHORITY\INTERACTIVE
    CONSOLE LOGON
    NT AUTHORITY\Authenticated Users
    etc...

No comments:

Post a comment