Re: I need to review the security of all the shares on my domain
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Tue, 25 Sep 2007 03:19:46 -0700
If you had such tool to tell you for each share what principals
are allowed, what would you do with it? If it is compare it to
what it should be, then why not just run a script to set them to
what they should be ? (and then scan machines for shares not
known, not in the "how they should be" list)
If you code, you could discover machines that are servers, or
machines that are sharing, and list out the share-level grants.
If you must also verify the NTFS permissions you have much
further work to do.
IMO it is far more simple to prescribe what should be set
and set it than to describe what is set and try to verify it.
Now, in an environment that is only first coming under such
management there is room for many "usability hazards", but
at least where users get changed accesses it is because they
were enjoying something they should not have had.
Bottom line is, if you need to inventory and manually verify
against some "it should be so" list, take the extra yards and
place the whole under active, prescriptive control (where
you can at any time run "set it as such" and see no reports of
problems.
Roger
<miponte@xxxxxxxxx> wrote in message
news:1190629890.991795.42670@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi there, i´ll try to explain my problem:
My network is going to be audited and I need to check the
security configuration of all the network shares i have on my domain
to see if just the groups and users that need to have access to each
share are the correctly configured.
Does anyone know any software, script, console or method that can
help me to achieve this without checking manually each share in each
server (it could take ages).
Thanks.
Miguel.
.
- References:
- Prev by Date: Re: I need to review the security of all the shares on my domain
- Next by Date: Re: I need to review the security of all the shares on my domain
- Previous by thread: Re: I need to review the security of all the shares on my domain
- Next by thread: Re: I need to review the security of all the shares on my domain
- Index(es):
Relevant Pages
|
