Re: Scripting Effective Permissions

In case of freeware I can advise two tools for this:

Dumpsec: http://www.somarsoft.com/

SetACL: http://setacl.sourceforge.net/

Last one is more scripting, and syntax can be a bit tricky and complex in
the beginning, but by looking at the examples you should be able to figure
it out. Once you get the hang of this tool it can be a life-saver, or just
very handy to bulk-apply ACL's, report, straighten out your fileserver,
etc...

--

Jon Holvoet
MCSA / MCSE Security
Comptia Security+
CISSP


"Chris Bingham" <ChrisBingham@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FD9A9280-FE1C-45E5-8C2F-CC1F7A44FF6F@xxxxxxxxxxxxxxxx
Hi,

I've got a bit of an issue with permissions and was hoping someone can
help
please?
I've got to do an audit of who can access what on our file servers - so
really what every user's effective NTFS permissions are on each share and
it's sub folders. Obviously this would take quite a while to do manually
(~150 users) and I've got zero budget to get any of the nice tools that do
all this for you!
So I was hoping I'd be able to script it, but I can't seem to find any
examples of how to do this...

What I'm after is a way to check what a given user accounts effective
permissions are on a given folder. By 'effective permissions', I mean the
kind of information you'd get from the 'Effective Permissions' tab in
Server
2003.
Ideally, I'm also looking to format the output so as to produce a nice
delimited, Excel-friendly, text file.

Does any one know of a way to do this please?
Or even better, does anyone know of a good, free tool for doing this
please?

Thanks for any help anyone can give,
Chris


.

Relevant Pages

  • Re: how to restrict users to search in their own Organizational Unit
    ... candidate for scripting IF the process makes sense at ... If MOSS Admins need to administer users and/or group membership, just create a mmc console and delegate the proper rights for them. ... Now, because you're dealing with many users, my recommendation is to create THE NECESARY Security Groups in each OU and related them with your MOSS2007 existing security groups, in future when someone creates some user, you just have to add that user to the necessary group and that user will be given the necessary permissions. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Creating Multiple FTP Users and Containers (2000 Server + IIS)
    ... > IIS Administrator for an FTP site. ... > complete Windows Scripting novice so I'm hoping that I can get some help ... > What I am even more unsure of is scripting the creation of Virtual Folders ... The permissions will need to be set to ...
    (microsoft.public.windows.server.scripting)
  • Re: Sql permissions headache
    ... By scripting all of your database objects and the permissions ... Knowing which permissions to assign each group is not going to be easy... ... creation (tables, views, stored procs, etc.), I put a GRANT statement to ...
    (microsoft.public.sqlserver.security)
  • Re: Creating Multiple FTP Users and Containers (2000 Server + IIS)
    ... >complete Windows Scripting novice so I’m hoping that I can get some help on ... >What I am even more unsure of is scripting the creation of Virtual Folders ... The permissions will need to be set to ... >account will need to be given ‘modify’ permissions (everything except ‘full ...
    (microsoft.public.windows.server.scripting)
  • Re: xcacls.vbs version 5.1
    ... We use open share permissions and tight NTFS ... Windows XP/Win2k3 computer instead and see if it helps on the speed. ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windows.server.scripting)