RE: Which Groups and what are effective permissions based on multiple groups?

From: Sophie Guo [MSFT] (v-sguo_at_online.microsoft.com)
Date: 02/24/05


Date: Thu, 24 Feb 2005 06:38:36 GMT

Hello Sgt.,
 
You can use xp_logininfo to get the group name which the user belongs to.
 
For example, if you have a Windows user John who belongs to the Windows
group test_permission, you can perform the following steps:
 
1. Run sp_who to get a user name. For example, 'test\John'
 
2. Run xp_logininfo to check the Windows group which the user belongs to.
For example, run the following command:
 
EXEC master..xp_logininfo 'test\John'
 
 
The results are as followings:
 
Account name type privilege mapped login name
   permission path
----------------------------------------------------------------------------
--------------------------------------------------
test\John user user test\John
                        TEST\test_permission
 
 
You can know that test\John belongs to the Windows group
TEST\test_permission.
 
 
3. Run sp_helprotect to check the group's permission. For example, run the
following command:
 
 
sp_helprotect null, [test\test_permission]
 
 
I hope above information is helpful.
 

Sophie Guo

Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Script to dump Local User "Group Membership" to a file.
    ... All I need is a script that ... can parse all Local Users and dump the username as well ... as what groups that user belongs to. ... Again this is Local Security on a Windows 2000 Svr. ...
    (microsoft.public.win2000.general)
  • Re: Script to dump Local User "Group Membership" to a file.
    ... I have a Windows 2000 Server that is a document ... All I need is a script that ... | can parse all Local Users and dump the username as well ... | as what groups that user belongs to. ...
    (microsoft.public.win2000.general)
  • Re: Getting a list of Roles a user belongs to using Windows Security Principal
    ... > I have created a windows application in .NET using C# here is the ... > As you can see I can determine if the current user belongs to ... > Moreover what is the String equivalent of WindowsBuiltInRole.Administrator ...
    (microsoft.public.dotnet.security)
  • Re: Whether Logged on User has Administrator Privilages or not
    ... The thing to keep in mind that being an adminitrator isn't an either or thing ... Joe Richards Microsoft MVP Windows Server Directory Services ... > Is there are any APIs in Active Directory that provides functionalities to ... > And the APIs to find out groups to which user belongs,in windows 2000 or ...
    (microsoft.public.win2000.active_directory)
  • RE: re-setting boot partition
    ... Description of the Windows 2000 Recovery Console ... For a Microsoft Windows XP version of this article, ... MB of hard disk space on your system partition to hold the Cmdcons folder ... Windows NTBoot Console Command Interpreter. ...
    (microsoft.public.win2000.setup_upgrade)