Microsoft Download Center Archive
 | DSREVOKE.EXE |
Views and removes permissions on Domain and OU containers of Active Directory domain controllers
- Dsrevoke is a command-line tool that can be used on domain controllers that are running Windows Server 2003 or Windows 2000 Server to report the existence of all permissions for a specific user or group on a set of OUs in a domain and optionally remove from the DACLs of a set of OUs all permissions specified for a particular user or group.
Dsrevoke complements the functionality provided by the Delegation of Control Wizard, which is used to delegate administrative authority, by providing the ability to revoke delegated administrative authority.
Files
 | Status: LiveThis download is still available on microsoft.com. The downloads below will come directly from the Microsoft Download Center. |
| File | SHA1 Hash | Size |
|---|---|---|
 Dsrevoke.doc | 43bd175e5516226931dcd68987dea525864b293f | 15 KB |
 dsrevoke.exe | 30de3c5a5fb5c99b9bbdcf8670cfe866e90379a2 | 61 KB |
File sizes and hashes are retrieved from the Wayback Machine’s indexes. They may not match the latest versions of files hosted on Microsoft servers.
System Requirements
Operating Systems: Windows 2000, Windows Server 2003, Windows XP
- DSREVOKE runs on Windows 2000, Windows XP Professional and Windows Server 2003 domain members and controllers against Windows 2000 and Windows Server 2003 Active Directory domain controllers.
Installation Instructions
- Type "DSREVOKE /?" (no quotes) from the CMD prompt of a Windows 2000, Windows XP or Windows 20003 computer that is a domain member or domain controller of an Active Directory forest being targeted by the DSREVOKE.EXE utility.