asked on

How do I discover what shares/folders/files in our network a security group has rights to?

How do I list all the access grants given to a security group in a
domain? I have a security group that I want to know every access it
has been granted on every server in the domain. I have examined
several utilities and commands but none of them provide the
information I need. The utlities and commands I have tried include
AccessEnum
ShareEnum
Net Group

I have not found any utility in the Windows 2003 Server Resource kit
that can do the task. I did find a command line utility -- PERMS that
was used with NT, but it is not available/usable with Win 2003.

Mike Kline

There is no free tool that will do that (that I know of), something like Quest access may help (deploys agents) http://www.quest.com/access-manager/

...but a tool that will give you a global view of where does this group have rights anywhere in my forest/domain is something that is needed.

Thanks

Mike

LingerLonger

Hyena can give you a lot of this information, thought it looks like there may be some work combing through the data/reversing it to look at the group side instead of the share side - http://www.systemtools.com/.
ManageEngine's AD Manager Plus is another option - http://www.manageengine.com/products/ad-manager/active-directory-ntfs-reports.html.

Both are relatively inexpensive, and offer trial downloads.

ASKER CERTIFIED SOLUTION

michko

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial