We help IT Professionals succeed at work.

How to view ownership or folder/share access a particular Group in AD has?

esckeyrwm asked
Medium Priority
Last Modified: 2010-04-18

My AD enviorment is running on a Windows 2003 server, using one domain.

I would like to be able to view folders/files/shares belonging to a particular group.  An example would be - I would like to select the Accounting group and see what folders/files/shares it has access to and what type of access (read/write/etc) it has.

Is there a tool or snap-in that will allow me to view the "ownership" a particular GROUP (not OU) has?

Watch Question


Both of these articles talk about how you can find out what groups are associated with each folder/share.  That is easy to do within the ADUC too.

What I want to know is, how to find the folders/shares that are associated with a given Group!  I'd like to do what these articles are describing, but doing it in backwards order.  Does that make sense?

Basically, I want to start with a known Group (call it Accounting).  I want to be able to find out what folders the group Accounting has access too.  I know there will be a lot of them, so I don't want to go through the File Server looking at each folder.  I'd like to be able to view it from within the Group itself.  Is this possible?
you'll need something like Enterprise Security Reporter from www.scriptlogic.com to do this.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Easiest and simple way is

Go to relevant folder

View -> detail > right mouse click on upper field name (example: right mouse click on “Name” or  “Size “  )  -> select attribute , owner or what ever your want see  (selected will show with a “tick” ).  It display new column with detail


ohh !!  you want  see without going to each folder .is it ?

yes , ther is system,  lol :)

Will think you want to see “c:\” drive

Right mouse on c drive > search > *.*   > it will show all files and folders

Next apply above my comment , next you can index it by user names or...



Ok - I think I haven't been very clear on what I need to do.  Let me see if I can elaborate a bit more...

I would like to query a particular group to see what folders or shares it has access to.  Here's an example:

I have a group called Accounting.  In the Accounting Group I have three users; Bob, Suzy and Fred.
I only want the Accounting group to have read/write access to two folders on my file server: Payments and Checks
Now, before I became Admin, there was this crazy guy who gave the Accounting group read/write access to a bunch of different folders on my file server - probably 100 of them!  Because I have over 500 folders on the server, sorting through each folder and looking at the permission table would be a grueling and time consuming task.

So what I'm looking for is a tool that will let me select the Accounting Group, then query it to see what folders it has been assigned rights.  I know there are tons of auditing programs that will generate a huge log of all the folders and ownerships of those folders, but my hunch is there has got to be a better/easier way to query just one particular group.

I'm upping the points on this because it seems to be a difficult question.

I hope that makes more sense.  Thanks again!

you'll need something like Enterprise Security Reporter from www.scriptlogic.com to do this.


It will do EXACTLY what you are talking about.  Get an eval copy of it...


ok . Then I think no solutions with Microsoft inbuilt features. As "TheCleaner "  comment you have to go to 3'rd party software.
 ya Cleaner , thats cool !   Scriptlogic  file auditor software can strore detail in SQL database and nice suppot with reports. (not tested just read there web sites )

Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.