Page 1 of 1 1
Topic Options
#144815 - 2005-08-05 01:49 AM Tools for checking applied permissions
StarwarsKid Offline
Seasoned Scripter
*****

Registered: 2005-06-15
Posts: 506
Loc: Oregon, USA
I know I've seen some references to this in the past on this board, but I can't quite seem to find the past posts on the subject.

I would like to find a program that lets me check where a group has been granted permissions. Similar to what Security Explorer can do, but a free utility that just checks the applied permissions of a group.

Thanks for your advice.

*Edit* Just found that Miak asked a question in "Starters" about listing NTFS permisions. That's close to what I'm looking for, but I'd like to search based on Groups.. Well, if anyone has a recommendation, thanks!


Edited by StarwarsKid (2005-08-05 02:01 AM)
_________________________
let the wise listen and add to their learning,
and let the discerning get guidance- Proverbs 1:5

Top
#144816 - 2005-08-05 02:56 AM Re: Tools for checking applied permissions
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11631
Loc: CA
You would probably have to code your own or purchase a utility. DUMPSEC does allow Group reports, but probably not the level you're wanting.
Top
#144817 - 2005-08-05 03:51 AM Re: Tools for checking applied permissions
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Kid,
I think you're dreaming. ACEs can exist on hundreds or thousands of computers. There is no possible way to get a report on all ACEs that a group is listed in.

Now, if all you want is to scour one particular volume, searching for group ACEs, you can do that easily with SubInACL.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#144818 - 2005-08-08 10:52 PM Re: Tools for checking applied permissions
StarwarsKid Offline
Seasoned Scripter
*****

Registered: 2005-06-15
Posts: 506
Loc: Oregon, USA
Les,

You hit the nail on the head. Just looking to search one volume on one server. I've simplified and segregated the Group membership/Secs applied well enough with the new network design, but there are some groups that exist prior to my arrival that I'd like to disable/delete/consolidate. Hopefully, SubInACL will do the trick for me.

Thanks!
_________________________
let the wise listen and add to their learning,
and let the discerning get guidance- Proverbs 1:5

Top
#144819 - 2005-08-20 02:03 PM Re: Tools for checking applied permissions
iffy Offline
Starting to like KiXtart

Registered: 2005-05-29
Posts: 149
Loc: The Netherlands
I can suggest AccessEnum from Sysinternals... very highly recommended (as are most of their tools).
Top
Page 1 of 1 1


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 507 anonymous users online.
Newest Members
Sir_Barrington, batdk82, StuTheCoder, M_Moore, BeeEm
17886 Registered Users

Generated in 0.053 seconds in which 0.022 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org