Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 155
  • Last Modified:

Script AD Group memberships and access rights

Hi there,

I need to find a way of listing all the members of my Windows 2000 active directory groups and then to scan our file, print and application servers to find out where each group has access. would anybody know of such a script or scripts? All help greatly appreciated.

Thanks
Invirl
0
invirl
Asked:
invirl
  • 2
1 Solution
 
star_trekCommented:
Microsoft script repository to find the group memberships
http://www.microsoft.com/technet/technetmag/issues/2006/03/ScriptingGuy/default.aspx
0
 
invirlAuthor Commented:
thanks but that only partially (maybe 20%) answers my question. What I'm really trying to achieve here is to find out who has access where without having to manually check the file permissions on each my my shared folders. Perhaps there's an application that I'm not aware of which can do this for me?
0
 
star_trekCommented:
Yes you can view the ACLs on a the shared folders. You can do in two ways. Use CACLS.EXE or register AdsSecurity.dll and use it in vbscripts or jscripts

For CACLS.EXE
http://www.ss64.com/nt/cacls.html

For Security Descriptor:

Look at the following technet links where you can see different commands with example code to view and modify ACLs
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/iadssecurityutility.asp
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/iadssecurityutility_getsecuritydescriptor.asp
To analyze the access: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthz/security/access_mask.asp


So to answer your whole question you need to write a script that reads the group memberships of a user and also find the permissions on a shared folder using above VBScript commands.

But I don't think there is anyother tool that would read both the group memberships and also the ACLs
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now