up vote 5 down vote favorite
1
share [g+] share [fb]

I can get the logged in user's privileges in powershell like so:

whoami /priv

How do I do this for a user I'm not logged in as?

link|improve this question
50% accept rate
Do you want this for someone who is currently logged in, or for just any user in general? – squillman Jan 17 at 19:45
Any user. I'd like to do something like: whoisuser someuser /priv. If you get my drift. – 白ジェームス Jan 17 at 19:46
feedback

3 Answers

up vote 5 down vote

This might answer for your question.

http://technet.microsoft.com/en-us/sysinternals/bb664922

Via AccessChk, you should be able to view all users and their associated rights on that 2008 Server. (Sysinternals)

link|improve this answer
I'd rather the tool already be installed with the operating system. – 白ジェームス Jan 17 at 19:20
8  
...which is often not possible under Windows; the recommended toolkits are often not so much recommended as much as mandatory (or WHY THE @#%!! DIDN'T THEY INCLUDE THEM?!) – Bart Silverstrim Jan 17 at 19:23
@subt13 What Bart said. Alternatively wait 3-5 years and MS may include those toolkits with the OS (and you'll be able to download newer, better ones). – voretaq7♦ Jan 17 at 20:26
feedback
up vote 2 down vote

SECEDIT /export /areas USER_RIGHTS /cfg foo.txt exports the list of user privileges and the users associated with each of the privileges.

Since this returns the set of user privileges associated with all the users associated with the system where the command gets executed you will have the information for any user associated with the system whether or not he/she is logged in.

The /areas is for you to specify the information that you are interested in that needs to be exported. (to the file specified following /cfg).

You have options for /areas as SECURITYPOLICY/GROUP_MGMT/USER_RIGHTS/REGKEYS/FILESTORE/SERVICES

link|improve this answer
feedback
up vote 1 down vote

I'm going to put this here as an answer for another way of doing it, even though I haven't learned enough about this tool to really understand the output ):

secedit /export /areas USER_RIGHTS /cfg foo.txt
link|improve this answer
Thanks @Remus Rusanu – 白ジェームス Jan 17 at 22:05
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.