Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I can get the logged in user's privileges in powershell like so:

whoami /priv

How do I do this for a user I'm not logged in as?

share|improve this question
    
Do you want this for someone who is currently logged in, or for just any user in general? –  squillman Jan 17 '12 at 19:45
    
Any user. I'd like to do something like: whoisuser someuser /priv. If you get my drift. –  O.O Jan 17 '12 at 19:46

3 Answers 3

This might answer for your question.

http://technet.microsoft.com/en-us/sysinternals/bb664922

Via AccessChk, you should be able to view all users and their associated rights on that 2008 Server. (Sysinternals)

share|improve this answer
    
I'd rather the tool already be installed with the operating system. –  O.O Jan 17 '12 at 19:20
8  
...which is often not possible under Windows; the recommended toolkits are often not so much recommended as much as mandatory (or WHY THE @#%!! DIDN'T THEY INCLUDE THEM?!) –  Bart Silverstrim Jan 17 '12 at 19:23
    
@subt13 What Bart said. Alternatively wait 3-5 years and MS may include those toolkits with the OS (and you'll be able to download newer, better ones). –  voretaq7 Jan 17 '12 at 20:26

I'm going to put this here as an answer for another way of doing it, even though I haven't learned enough about this tool to really understand the output ):

secedit /export /areas USER_RIGHTS /cfg foo.txt
share|improve this answer
    
Thanks @Remus Rusanu –  O.O Jan 17 '12 at 22:05

SECEDIT /export /areas USER_RIGHTS /cfg foo.txt exports the list of user privileges and the users associated with each of the privileges.

Since this returns the set of user privileges associated with all the users associated with the system where the command gets executed you will have the information for any user associated with the system whether or not he/she is logged in.

The /areas is for you to specify the information that you are interested in that needs to be exported. (to the file specified following /cfg).

You have options for /areas as SECURITYPOLICY/GROUP_MGMT/USER_RIGHTS/REGKEYS/FILESTORE/SERVICES

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.