How to view and export AD delegate permissions assigned to an OU ?
Let’s check what’s the permission has been delegated to a OU.
View delegate permissions assigned to OU
1. Please open the ADUC and click View menu and check Advanced Features.
2. Please locate the specific OU and right click, then choose Properties.
3. Click the Security tab, click Advanced tab. All the permissions as well as the delegated permissions listed.
Export all permission assigned on specific OU to a text file
Moreover, we can use the dsacls tool to export all the security ACL on specific OU to a text file.
Please open a command prompt on the DC and run dsacls “<distinguish name of the ou>” > c:acl.txt
For example, dsacls “ou=Marketing,dc=seneej,dc=com” > c:acl.txt
The dsacls tools is used for view and edit security ACL for AD objects.