RE: Search NTFS share permissions

From: Jared Ingersoll (jared_at_cswv.com)
Date: 05/20/04

  • Next message: Marc Fossi: "Article Announcement: Busted"
    To: "'taz@hfactorx.org'" <taz@hfactorx.org>, mailinglists@online.ms
    Date: Thu, 20 May 2004 08:17:34 -0400
    
    

    This may get a little tricky with free software, but if you're script savvy,
    then the tools are at your fingertips. I personally use cygwin along with
    the resource kit to solve these types of problems, but here's a start with
    cygwin:

    1. enumerate the domain computers with net view, redirect into text file
    with awk, etc.
    2. build a script that mounts default administrator drive shares (C$, D$,
    etc.), change to mount point and then runs the utility "showacls.exe" from
    resource kit, redirect into txt file.
    3. Unmount share.

    With showacls, you can list the default shares or a recursive listing of all
    subdirectories (lots of info). If you're looking for a particular type of
    access, you can always use grep.

    Cygwin is our friend.

    Jared

    -----Original Message-----
    From: taz@hfactorx.org [mailto:taz@hfactorx.org]
    Sent: Wednesday, May 19, 2004 3:39 PM
    To: mailinglists@online.ms
    Cc: focus-ms@securityfocus.com
    Subject: RE: Search NTFS share permissions

    Not sure exactly what your looking for, but I threw together some script
    files
    which checks the shares of all network Windows machines and lists the share
    permissions of them in a text file:

    http://forum.hfactorx.org/index.php?board=37;action=display;threadid=181

    Tazinator
    HFX International Org.
    www.hfactorx.org

    -------------------------------

    Hi,

    currently I'm looking for tools to search NTFS share permissions (by group
    or by
    user).
    I've been testing superCACLS (pracl) and SecurityExplorer by smallwonder.
    Seems
    like those tools could do what I'm looking for.
    Are there any other cheap or even free tools can search share permissions?
    How
    about *nix/Linux tools?

    --ml

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------


  • Next message: Marc Fossi: "Article Announcement: Busted"

    Relevant Pages

    • Re: cant get access to disk share when connecting from a remote s
      ... The systems are DUTs. ... for each of the drives within the system. ... Everything in the scripts work except the file permissions below the shares ... the shares on the DUTs manually, after they run my rename script, but I would ...
      (microsoft.public.windows.server.scripting)
    • Re: VBA Script to Read WMP 11 Database
      ... The script failed on the desktop when I downloaded WMP11, ... Just reviewing the bidding -- WMP 11 responds properly to commands in a VBS ... That's why the computer wouldn't let me manually change the permissions. ... Digital Media MVP: 2004-2007 ...
      (microsoft.public.windowsmedia)
    • Re: VBA Script to Read WMP 11 Database
      ... The script failed on the desktop when I downloaded WMP11, ... Just reviewing the bidding -- WMP 11 responds properly to commands in a VBS ... That's why the computer wouldn't let me manually change the permissions. ... The CREATOR OWNER is likely on windows to be one of the admin accounts ...
      (microsoft.public.windowsmedia)
    • Re: how to restrict users to search in their own Organizational Unit
      ... will be given the necessary permissions. ... Who would you DENY? ... decided a script can make it possible to accomplish, ... If I need to create a security group per OU and then add all users ...
      (microsoft.public.windows.server.active_directory)
    • Re: Script to Copy Files from a Share to a Client Not Working
      ... regardless of the value of overwrite. ... I have the permissions applied now, ... The script is in place and is executing as ... > The copy is instructing the file located on a SERVER to ...
      (microsoft.public.windows.server.active_directory)