How to view ownership or folder/share access a particular Group in AD has?


My AD enviorment is running on a Windows 2003 server, using one domain.

I would like to be able to view folders/files/shares belonging to a particular group.  An example would be - I would like to select the Accounting group and see what folders/files/shares it has access to and what type of access (read/write/etc) it has.

Is there a tool or snap-in that will allow me to view the "ownership" a particular GROUP (not OU) has?

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

esckeyrwmAuthor Commented:
Both of these articles talk about how you can find out what groups are associated with each folder/share.  That is easy to do within the ADUC too.

What I want to know is, how to find the folders/shares that are associated with a given Group!  I'd like to do what these articles are describing, but doing it in backwards order.  Does that make sense?

Basically, I want to start with a known Group (call it Accounting).  I want to be able to find out what folders the group Accounting has access too.  I know there will be a lot of them, so I don't want to go through the File Server looking at each folder.  I'd like to be able to view it from within the Group itself.  Is this possible?
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

you'll need something like Enterprise Security Reporter from to do this.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Easiest and simple way is

Go to relevant folder

View -> detail > right mouse click on upper field name (example: right mouse click on “Name” or  “Size “  )  -> select attribute , owner or what ever your want see  (selected will show with a “tick” ).  It display new column with detail

ohh !!  you want  see without going to each folder .is it ?
yes , ther is system,  lol :)

Will think you want to see “c:\” drive

Right mouse on c drive > search > *.*   > it will show all files and folders

Next apply above my comment , next you can index it by user names or...

esckeyrwmAuthor Commented:
Ok - I think I haven't been very clear on what I need to do.  Let me see if I can elaborate a bit more...

I would like to query a particular group to see what folders or shares it has access to.  Here's an example:

I have a group called Accounting.  In the Accounting Group I have three users; Bob, Suzy and Fred.
I only want the Accounting group to have read/write access to two folders on my file server: Payments and Checks
Now, before I became Admin, there was this crazy guy who gave the Accounting group read/write access to a bunch of different folders on my file server - probably 100 of them!  Because I have over 500 folders on the server, sorting through each folder and looking at the permission table would be a grueling and time consuming task.

So what I'm looking for is a tool that will let me select the Accounting Group, then query it to see what folders it has been assigned rights.  I know there are tons of auditing programs that will generate a huge log of all the folders and ownerships of those folders, but my hunch is there has got to be a better/easier way to query just one particular group.

I'm upping the points on this because it seems to be a difficult question.

I hope that makes more sense.  Thanks again!

you'll need something like Enterprise Security Reporter from to do this.


It will do EXACTLY what you are talking about.  Get an eval copy of it...

ok . Then I think no solutions with Microsoft inbuilt features. As "TheCleaner "  comment you have to go to 3'rd party software.
 ya Cleaner , thats cool !   Scriptlogic  file auditor software can strore detail in SQL database and nice suppot with reports. (not tested just read there web sites )

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.