Re: command line tool to check ntfs permissions

From: Oliver (oliver@greyhat.de)
Date: 11/27/02


From: oliver@greyhat.de (Oliver)
Date: 27 Nov 2002 00:31:19 -0800

you can take "subinacl.exe" from the reskit to get/set the permissions
from files/folders/registry-keys/shares.

bye,

Oliver
www.greyhat.de

fishboy51@hotmail.com (Paul Fisher) wrote in message news:<5a98f5e7.0211080714.6caa4df1@posting.google.com>...
> I posted this to the msnews server the other week, but have not
> recieved a response:
>
> >Hi have a Win2k SP3 domain controller that has a
> >few shares on it...
> >
> >1 share contains home directories
> >1 share contains profile folders
> >
> >both shares have ~4000 subfolders in them,
> >one for each account on the system.
> >
> >When I map from any client to \\servername\home.dirs
> >it takes up to 30 seconds to enumerate the folder list.
> >When I map to \\servername\profiles it returns the list
> >in under 2 seconds.
> >
> >Is there anything that I can look into to see why one
> >is taking so long? I was thining of resetting all
> >persissions of folders and files, but wanted to know if
> >there was a "look here first" thing I could do.
>
> I believe my problem is somewhere in the permissions. I am looking
> for a command-line tool to audit the permissions on the folders. I
> could write one up in VBScript, but I hate to reinvent the wheel.
>
> Thanks
> Paul
>
> PS - any other suggestions would be greatly appreciated.



Relevant Pages

  • Re: Printing AD items
    ... There is no practical way to show which folders ... tools for NTFS file and directory permissions. ... The problem with shares is that there is no trivial ... you can list the shares with "net share" on each server. ...
    (microsoft.public.win2000.active_directory)
  • Re: Printing AD items
    ... There is no practical way to show which folders ... tools for NTFS file and directory permissions. ... The problem with shares is that there is no ... you can list the shares with "net share" on each server. ...
    (microsoft.public.win2000.active_directory)
  • Re: cant get access to disk share when connecting from a remote s
    ... > When I am connecting to the shares created by the script I always connect ... > with the admin username and password of the system that the shares are on; ... NTFS permissions on the files and folders themselves. ...
    (microsoft.public.windows.server.scripting)
  • Re: removing user from domain users group doesnt help
    ... user permissions to any shares and instead give permissions to the global groups you want to have access or give the global group deny permissions to the shares you don't want them to access or deny access this computer from the network user right for computers you don't want them to access shares on which can easily be managed via Group Policy. ... I have few shared folders on my w2k3 file server and most of them allow read access for the domain users group. ...
    (microsoft.public.windows.server.security)
  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)