Was this page helpful?
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

Sdcheck Syntax

Updated: March 28, 2003

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

SDCheck Syntax

SDCheck uses the following syntax:

Art Image sdcheck Server Object [/dumpsd] [/dumpall] [/debug] [[/domain:DomainName/user: UserName /password: Password]


Specifies the name of the domain controller on which to perform the query. The name may be either the DNS name or the NetBIOS name of the domain controller.

Specifies the name of the object on which you want to determine the access control list (ACL) entries. The name can be either the logon name (for example, EXAMPLE\someone), the fully distinguished name (for example, cn=Someone, ou=Sales,dc=example,dc=com), or the user principal name (for example, someone@example.com).

Displays only the security descriptor for the selected object.

Displays the security descriptor for the selected object along with all security descriptors inherited from parent containers. Administrators can use this parameter to determine the inheritance of security descriptors from parent objects through the object hierarchy.

Displays internal debugging information for the Security Descriptor Check Utility.

/domain: DomainName
Specifies the domain name of UserName in either DNS or NetBIOS format. Used to specify credentials other than the current user's.

/user: UserName
Specifies the name of a user other than the current user, in the form of either the logon name or user principal name. If a user principal name is specified, then a domain name is not required.

/password: Password
Specifies the password of UserName. Used to specify credentials other than the current user's.

See Also

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2015 Microsoft