Re: Checking ACL's on 60000 Folders - Advice needed
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Tue, 14 Feb 2006 18:33:36 -0700
There are various third-party tools that can provide reports,
such as dumpsec. However for that volume of folders the
reports will be laborious to dig through.
What I would do in your circumstance is see if it is more
direct to define what is supposed to be the ACLing over
the folders. If possible perhaps introduce some restructuring
at the same time to simplify / minimize that amount of variance.
Then, I would define a security template that states what should
be the ACLing. This template I would NOT import into any
GPO but instead would use to analyze against the template or
to (re)apply the ACLing when needed/desired.
"Dominick" <Dominick@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F850DD40-DB42-435C-BCDA-9E00A40BD597@xxxxxxxxxxxxxxxx
Hey guys;
I need some advice on how I can check ACL permissions on 60000 Folders on
a
network.
It seems the old admin, added (2) domain groups he wasnt supposed to, to
the
Main folders, and it inherited the 2 domain groups into all the
subfolders.
(Leaving things wide open)
Instead of me checking each folders ACL permissions 1 folder at a time, is
there an easier way?
They ran xcalcs, but its not giving an accurate reading, its showing the
LIST permission as a READ permission.
Open to all advice. Thanks in Advance.
.
- Prev by Date: Re: Security Update for Windows XP (KB913446)
- Next by Date: Re: Share permissions Win 2003 Server
- Previous by thread: Re: Security Update for Windows XP (KB913446)
- Next by thread: Re: Checking ACL's on 60000 Folders - Advice needed
- Index(es):
Relevant Pages
|
