How to list folder and subfolder permissions automatically?

Hi there,

I've got a terrible time when someone asks "what are the permissions granted to each account within the USERS share/folder"?

I have to manually see the Security Properties of each folder I need, and elaborate a (Word) document. This is really time-consuming!

Does anyone know a way (or a software) to automate such reports?


Cheers,
Ricardo
RicardoBSFAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RaybansTechnical ManagerCommented:
yes there is, let me see if I can find it for you..

cant remember the name of it

but such a beast does exist.

even had it exporting all the info to an Access Database
0
RaybansTechnical ManagerCommented:
found the tool I used

Ideal Administration

http://www.pointdev.com/us.htm

try the trial version, it should give you what you need

when you run it go to the Database menu
Files and Directories
I suggest you tick everything except for Extract Files


click on the Select Files and Directories to Export button

go through and select the PC/Server and the folders you want to audit.

makes a large database
and takes quiet a while

you can export a report from Access into HTML which I found the easiest way to read it
0
wtrmk74Commented:
will these commands help as well?

ADDUSERS \\COMPUTERNAME /D USERINFO.TXT

This will return a comma delimited file (for spreadsheets) containing user and group information, and write it to a file called USERINFO.TXT.

PERMS COMPUTERNAME\USERNAME C:\*.* /S >PERMS.TXT

This will return the username permissions on all files in all subdirectories on the c:\ drive of the computername, and write it to a file called PERMS.TXT

change the *.* to your share directory
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

oBdACommented:
Try it with DumpSec from Somarsoft (http://www.somarsoft.com/) and/or AccessEnum from Sysinternals (http://www.sysinternals.com/ntw2k/source/accessenum.shtml).
Both will go down from a given directory and display only subfolder/file permissions that differ from the root folder which makes them more concise than cacls.exe.
Both offer export to text files as well.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Joseph_MooreCommented:
Win2K comes with XCACLS.EXE which can enumerate the NTFS permissions on files/folders. Just open a Command Prompt, go to the directory you want to know about, and run it.
For example, to see the permissions on C:\Temp, you would open Command Prompt, go to the root of C: and run:
XCACLS TEMP. It will look like this.

C:\>xcacls temp
C:\TEMP Everyone:(OI)(CI)F


CD into Temp, and run "XCACLS *.*" to get the NTFS permissions on all files and subfolders in the directory.

hope this helps


0
wtrmk74Commented:
Hows it going so far ?
0
RicardoBSFAuthor Commented:
Hi there,

A little summary of my attempts:

- Ideal Administration seemed a very good and complete software. But maybe so complete it got out of my budget...

- Could not locate (execute or find executable file on disk) for commands ADDUSER, PERMS and XCACLS. Are they installed by default on Win2k Servers?

- DumpSec was *almost* the perfect tool. It did the job I need, but not with all the information. It does segment permissions per folder/file, but it only shows who's got READ or WRITE permissions. I would need to dump permissions just like they appear (all the available permissions) in Win2K.

But once again, thanks for your help. I appreciate all your comments, looking forward to find an answer.

Cheers,
Ricardo
0
wtrmk74Commented:
0
wtrmk74Commented:
Here is the complete list of tools , but microsoft will only let you download certain ones from their site...
http://www.microsoft.com/windows2000/techinfo/reskit/rktour/server/S_tools.asp


You can find the rest online in other websites like the one above.

:)
0
RicardoBSFAuthor Commented:
Folks,

Your help is much appreciated. I feel like a small point distribution would be the most fair result, obviously with greater weight to the best solution, but rewarding the others who shared their ideas.

Best wishes, and a merry Xmas!

Ricardo
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.