RE: Tool for checking ACL's on 60 thousand folders



I use fileacl.exe to do a dump, and wrote a perl script that runs daily
to diff the changes. I don't think it's necessary to monitor every
folder down the tree. You really only care about the root level and
couple of sub-dirs down since most folder permissions have inheritance
set on.

-----Original Message-----
From: Steve Fletcher [mailto:safletcher@xxxxxxxxxxxxx]
Sent: Monday, February 20, 2006 12:05 AM
To: fluidnyc@xxxxxxxxx; security-basics@xxxxxxxxxxxxxxxxx
Subject: RE: Tool for checking ACL's on 60 thousand folders

You might want to try XCACLS.VBS. It's a VBscript from Microsoft that
allows viewing and modifying the NTFS permissions on files and
directories.
While it is not extremely fast, it seems to do a pretty good job.

Steve Fletcher
MCSE (NT4/Win2k), MCSE: Security (Win2k), HP Master ASE, CCNA, Security+
Email: safletcher@xxxxxxxxxxxxx
Web: http://safletcher.home.insightbb.com

-----Original Message-----
From: fluidnyc@xxxxxxxxx [mailto:fluidnyc@xxxxxxxxx]
Sent: Thursday, February 16, 2006 2:11 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Tool for checking ACL's on 60 thousand folders

Hi:

I have to check ACL's on 60 thousand folders.

What would be the best tool to use that would show me "ALL" of the the
ACL's permissions that are on these network folders.

Thanks.

(AccessEnum and DumpACL I already know about.)

------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and
the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,

Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and
the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning, Computer Emergency Response Teams, and Digital Investigations.


http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---




-----------------------------------------
*******************************************************************
*

This e-mail is intended only for the addressee named above.
As this e-mail may contain confidential or privileged information,
if you are not the named addressee, you are not authorized
to retain, read, copy or disseminate this message or any part of
it.

*******************************************************************
*


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



Relevant Pages

  • RE: Windows Log
    ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The Norwich University program offers unparalleled Infosec management ... > education and the case study affords you unmatched consulting experience. ... > Computer Emergency Response Teams, ...
    (Security-Basics)
  • RE: Re: University Degree or CISSP
    ... Subject: Re: Re: University Degree or CISSP ... > And a college education will benefit you until the day you die. ... >> Planning, Computer Emergency Response Teams, and Digital Investigations. ... >> The Norwich University program offers unparalleled Infosec management ...
    (Security-Basics)
  • Re: Securing Blackberries
    ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The Norwich University program offers unparalleled Infosec management ... > Tailor your education to your own professional goals with degree ... > Computer Emergency Response Teams, ...
    (Security-Basics)
  • Re: Windows Log
    ... >> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... >> The Norwich University program offers unparalleled Infosec management ... >> education and the case study affords you unmatched consulting experience. ... >> Computer Emergency Response Teams, ...
    (Security-Basics)
  • Re: Securing Blackberries
    ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The Norwich University program offers unparalleled Infosec management ... > Tailor your education to your own professional goals with degree ... > Computer Emergency Response Teams, ...
    (Security-Basics)