Tuesday, April 05, 2005

Remove delegated security

Once a user or group is delegated access, it's necessary to remove the access manually. Microsoft has released a tool that will undo the process that delegation goes through. DSRevoke.exe will traverse all the ACL's in the domain and remove access for the user(s) or group(s) specified.