Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 156
  • Last Modified:

Locate user permissions

We have a couple incidents here where I need to find all the permissions assigned to a particular user or group on a server.  I've used programs like AccessEnum and excals to find all permissions on folders, but what I need it to be able to find just those related to a particular one.

For example. User X is leaving the company and user Y is being promoted to the position.  We can't simple rename the account because the new user has existing permissions they can't lose.  So I need to find all folders on a couple of servers that the old user had permission to.

We have the same case with a couple of groups that I'm wanting to consolidate into one group, but I need to combine their permissions.

Is there some utility that will let me specify a user and get the permissions?
0
Eagle6990
Asked:
Eagle6990
1 Solution
 
Gerwin Jansen, EE MVETopic Advisor Commented:
Think you could use xcacls or subinacl to display security and change it (with subinacl through a file).

try:
xcacls <drive>:\*.* /t /c

it will display _all_ security for all files/folders and subfolders, then use some filter tool to find the user(s) you want changed.

subinacl is a resource kit tool, which is quite powerful, check its helpfile...
0
 
Eagle6990Author Commented:
I found the tool I was looking for.  I used DumpSec http://www.somarsoft.com/ and it gives me a report on both shares and NTFS about permissions in a GUI.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now