Link to home
Start Free TrialLog in
Avatar of esckeyrwm
esckeyrwm

asked on

How to view ownership or folder/share access a particular Group in AD has?

Hi,

My AD enviorment is running on a Windows 2003 server, using one domain.

I would like to be able to view folders/files/shares belonging to a particular group.  An example would be - I would like to select the Accounting group and see what folders/files/shares it has access to and what type of access (read/write/etc) it has.

Is there a tool or snap-in that will allow me to view the "ownership" a particular GROUP (not OU) has?

Thanks!
Avatar of davy999
davy999
Flag of Denmark image

Avatar of esckeyrwm
esckeyrwm

ASKER

Both of these articles talk about how you can find out what groups are associated with each folder/share.  That is easy to do within the ADUC too.

What I want to know is, how to find the folders/shares that are associated with a given Group!  I'd like to do what these articles are describing, but doing it in backwards order.  Does that make sense?

Basically, I want to start with a known Group (call it Accounting).  I want to be able to find out what folders the group Accounting has access too.  I know there will be a lot of them, so I don't want to go through the File Server looking at each folder.  I'd like to be able to view it from within the Group itself.  Is this possible?
ASKER CERTIFIED SOLUTION
Avatar of TheCleaner
TheCleaner
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Easiest and simple way is

Go to relevant folder

View -> detail > right mouse click on upper field name (example: right mouse click on “Name” or  “Size “  )  -> select attribute , owner or what ever your want see  (selected will show with a “tick” ).  It display new column with detail

Maheen
ohh !!  you want  see without going to each folder .is it ?
yes , ther is system,  lol :)

Will think you want to see “c:\” drive

Right mouse on c drive > search > *.*   > it will show all files and folders

Next apply above my comment , next you can index it by user names or...

Maheen
Ok - I think I haven't been very clear on what I need to do.  Let me see if I can elaborate a bit more...

I would like to query a particular group to see what folders or shares it has access to.  Here's an example:

I have a group called Accounting.  In the Accounting Group I have three users; Bob, Suzy and Fred.
I only want the Accounting group to have read/write access to two folders on my file server: Payments and Checks
Now, before I became Admin, there was this crazy guy who gave the Accounting group read/write access to a bunch of different folders on my file server - probably 100 of them!  Because I have over 500 folders on the server, sorting through each folder and looking at the permission table would be a grueling and time consuming task.

So what I'm looking for is a tool that will let me select the Accounting Group, then query it to see what folders it has been assigned rights.  I know there are tons of auditing programs that will generate a huge log of all the folders and ownerships of those folders, but my hunch is there has got to be a better/easier way to query just one particular group.

I'm upping the points on this because it seems to be a difficult question.

I hope that makes more sense.  Thanks again!
Again:

you'll need something like Enterprise Security Reporter from www.scriptlogic.com to do this.


:)

It will do EXACTLY what you are talking about.  Get an eval copy of it...

ok . Then I think no solutions with Microsoft inbuilt features. As "TheCleaner "  comment you have to go to 3'rd party software.
 ya Cleaner , thats cool !   Scriptlogic  file auditor software can strore detail in SQL database and nice suppot with reports. (not tested just read there web sites )

Maheen