Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Our company gets audited pretty regularly and I was wondering if there's an easy way to find out which accounts have access to what on our network?

We're an all windows development shop, so all our servers are Win 2003-2008 and our databases are all Sql server 05/08. Is there any software I can run that will show for each entity (ie: Windows server or SQL database), which AD accounts/groups have what type of access?

Thanks! Andrew

share|improve this question

closed as off topic by Canadian Luke, TFM, ChrisF, CharlieRB, Ƭᴇcʜιᴇ007 Nov 15 '12 at 3:47

Questions on Super User are expected to relate to computer software or computer hardware within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer 1

you can run this script against all registered servers in SSMS:

SELECT loginname AS NAME, dbname, denylogin, hasaccess, 
sysadmin, securityadmin, setupadmin, processadmin, diskadmin, 
dbcreator, bulkadmin 
FROM sys.syslogins

Does a pretty decent job. I used this for a Ernst & Young security audit at our shop.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.