1. Home
  2. Server Administration
  3. Active Directory. Windows server 2003 Windows 2000

ACL Diagnostics Command (acldiag.exe)

ACL Diagnostics Command (acldiag.exe)
Tasks that can be accomplished:

View the ACL (permission and audit entries) for an object, check an object's ACL against the default in the schema, get effective permissions for a user or group, and check and fix delegations performed through the Delegation of Control wizard

Type of tool:

Command line

Where to find it:

Support Tools for Windows 2000 and Windows Server 2003

Recipes in which it is used:

Recipe 14.9, Recipe 14.12



    		Chapter 1. Getting Started
    		Chapter 2. Forests, Domains, and Trusts
    		Chapter 3. Domain Controllers, Global Catalogs, and FSMOs
    		Chapter 4. Searching and Manipulating Objects
    		Chapter 5. Organizational Units
    		Chapter 6. Users
    		Chapter 7. Groups
    		Chapter 8. Computers
    		Chapter 9. Group Policy Objects (GPOs)
    		Chapter 10. Schema
    		Chapter 11. Site Topology
    		Chapter 12. Replication
    		Chapter 13. Domain Name System (DNS)
    		Chapter 14. Security and Authentication
    		Chapter 15. Logging, Monitoring, and Quotas
    		Chapter 16. Backup, Recovery, DIT Maintenance, and Deleted Objects
    		Chapter 17. Application Partitions
    		Chapter 18. Interoperability and Integration
    		Appendix A. Tool List
    		ACL Diagnostics Command (acldiag.exe)
    		Active Directory Domains and Trusts Snap-in (domain.msc)
    		Active Directory Installation Wizard (dcpromo.exe)
    		Active Directory Load Balancer Command (adlb.exe)
    		Active Directory Schema Snap-in (schmmgmt.msc)
    		Active Directory Sites and Services (dssite.msc)
    		Active Directory Users and Computers Snap-in (dsa.msc)
    		AD Prep Utility (adprep.exe)
    		ADSI Edit (adsiedit.msc)
    		Audit Policy Command (auditpol.exe)
    		Backup Wizard (ntbackup.exe)
    		CSVDE Command (csvde.exe)
    		Default Domain Controller Security Policy Snap-in (dcpol.msc)
    		Default Domain Security Policy Snap-in (dompol.msc)
    		Default Group Policy Restore Command (dcgpofix.exe)
    		DNS Snap-in (dnsmgmt.msc)
    		DNSCmd Command (dnscmd.exe)
    		Domain Controller Diagnosis Command (dcdiag.exe)
    		DS ACL Command (dsacls.exe)
    		DS Add Command (dsadd.exe)
    		DS Get Command (dsget.exe)
    		DS Modify Command (dsmodify.exe)
    		DS Move Command (dsmove.exe)
    		DS Query Command (dsquery.exe)
    		DS Remove Command (dsrm.exe)
    		Enumprop Command (enumprop.exe)
    		Group Policy Management Console (gpmc.msc)
    		Group Policy Object Editor (gpedit.msc)
    		Group Policy Verification Tool (gpotool.exe)
    		Group Policy Results Command (gpresult.exe)
    		Group Policy Refresh Command (gpupdate.exe)
    		IP Configuration (ipconfig.exe)
    		Kerberos List (klist.exe)
    		Kerberos Tray (kerbtray.exe)
    		LDIFDE Command (ldifde.exe)
    		LDP (ldp.exe)
    		Move Tree Command (movetree.exe)
    		Netdom Command (netdom.exe)
    		Network Connectivity Tester (netdiag.exe)
    		NLTest Command (nltest.exe)
    		Nslookup Command (nslookup.exe)
    		NTDS Util Command (ntdsutil.exe)
    		OID Generator Command (oidgen.exe)
    		Redirect Default Computers Command (redircmp.exe)
    		Redirect Default Users Command (redirusr.exe)
    		Reg Command (reg.exe)
    		Registry Editor (regedit.exe)
    		Rename Domain Command (rendom.exe)
    		Replication Diagnostics Command (repadmin.exe)
    		Replication Monitor (replmon.exe)
    		Resultant Set of Policy Snap-in (rsop.msc)
    		SecEdit Command (secedit.exe)
    		Time Service (w32tm.exe)
    		Unlock (unlock.exe)
    		UUID Generator Command (uuidgen.exe)
    		WinNT32 Command (winnt32.exe)