utility for NTFS permissions

How to use Xcacls.vbs to modify NTFS permissions
http://support.microsoft.com/kb/825751

Use Xcacls.vbs to View Permissions

You can also use Xcacls.vbs to view permissions for files or folders. For example, if you have a folder that is named C:\Test, type the following at a command prompt to view the folder permissions, and then press ENTER:
xcacls.vbs c:\test
The following example is a typical result:

How to Use CACLS.EXE in a Batch File
http://support.microsoft.com/kb/135268
Cacls.exe is a Windows NT/2000/XP command-line tool you can use to assign, display, or modify ACLs (access control lists) to files or folders. Cacls is an interactive tool, and since it's a command-line utility, you can also use it in batch files. I first used Cacls in a batch file as part of a new user creation process and found it quite useful. You can also use Cacls in conjunction with other command-line tools. Used with other administration tools, Cacls will make it much easier to handle administrative tasks performed in large environments.

i'll have a look at the tool tuesday,thanks.  Can it check the owner of the (NTFS) object?

Question:Can it check the owner of the (NTFS) object?
Yes
DIR /Q - Displays the owner for a list of files  http://www.ss64.com/nt/dir.html


http://www.ss64.com/nt/xcalcs.html

CACLS - Display or modify Access Control Lists (ACLs) for files and folders
SUBINACL - Edit file and folder Permissions, Ownership and/or Domain
DIR /Q - Display the owner for a list of files (try it for Program files)
AccessEnum - GUI to browse a tree view of user privs
NTRIGHTS - Edit user account rights
PERMS - Show permissions for a user
SHOWACL - Show file Access Control Lists (win 2000)
SHOWACCS - Show ACLs on the registry, file system, file and print shares
SUBINACL - Change an ACL's user/domain
ATTRIB - Display or change file attributes
Permissions & Local/Global Workgroups
Permissions explained - Microsoft.com
Access-based Enumeration - Set file listing to only display files you can read (Win 2003)
Q245031 - Change Registry Permissions from the command line
Q822790 - Xcacls /E - Objects do not inherit permissions as expected.
ACL utils: SetAcl or FileACL
Equivalent bash command (Linux): chmod - Change access permissions, chown - Change file owner and grou

Xcals.vbs seems to do everything I want to do but I want to get query all files, folder in the sub directory and then its sub directory and on and on until its all the objects have been checked.  I have used the following command but it only takes into to the next level:

xcacls.vbs C:\temp\* /L C:\test.txt

Script Question should be posted in the following ZONE
Scripting Languages, Visual Basic Programming, Windows 2003 Server

better help from these Zone   use Attach Code Snippet  

Scripting is an art..  for some of these guys.  

SUggest using ACLview from NCS-Z tools.

This GUI security / ACL editor has been a constant in my toolbox since NT3.51 !!!!

Not sure if its still in delvelopment, didnt find the authors website when I looked just now, but if you google it you will find hundreds of download points.

Stable, free, with advanced ACL features, small, intutive, ssimple.

HIGHLY RECOMENDED.