Solved

Folder ACL List to Table

Posted on 2007-03-27
12
1,186 Views
Last Modified: 2013-11-27
Ultimately, this is what I want: I want to be able to print out a list of what folders a group or user has access to on a specific server and what permissions they have on that folder.

I'm thinking about dumping a list of users and groups into a table in MS Access and then doing some form of ACL query on a server and dumping that info into a table... the problem is, I don't know how to do that.

Anyone out there that can point me in the right direction or provide links?

FYI: Windows 2003 Domain
0
Comment
Question by:victornegri
  • 4
  • 3
  • 3
  • +1
12 Comments
 
LVL 67

Accepted Solution

by:
sirbounty earned 300 total points
ID: 18804765
http://www.somarsoft.com/ dumpacl may be helpful for you..
0
 
LVL 10

Author Comment

by:victornegri
ID: 18804884
Have that tool... but you know what, I never noticed that it had command line switches until now. I can probably just create csv files and link them in Access.

Thanks.

Will keep the question open just in case other people have input.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18804947
SecurityExplorer (pricey) may be a more graphical option for you...
0
 

Expert Comment

by:pobblebonk
ID: 18805244
Hi,

I would recommend using a VBScript and WMI to query the servers and load the data into an access database using ADO.

If you need further advice let me know.

Mat
0
 
LVL 10

Author Comment

by:victornegri
ID: 18805750
Mat, If you could point me in the right direction for that I'd appreciate it. I tried doing that before but I couldn't get the recursion to work on large folder structures (which is what I need).
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 4

Assisted Solution

by:jmhquest
jmhquest earned 200 total points
ID: 18805909
You could create a PowerShell script to get a listing of all the folders and their ACLs on a server.

http://www.microsoft.com/technet/scriptcenter/hubs/msh.mspx
0
 
LVL 10

Author Comment

by:victornegri
ID: 18805916
Been looking into that too (just found it today). :)

Seems like it has good potential. Just hope I can call the script from within Access.

Do you have any good examples I can use to get started with PowerShell (for this particular project)?
0
 
LVL 4

Expert Comment

by:jmhquest
ID: 18807394
MS has an example to list all the folders on a computer.  Look in the PowerShell script repository.
0
 
LVL 4

Expert Comment

by:jmhquest
ID: 18807400
p.s. getting the ACLs is a WMI call.  Feed the results of the folder list into the wmi call.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 19009617
Nothing against {http:#18805244} but the author stated that they had already gotten that far on their own and the expert never returned to provide any further guidance on that route...
0
 
LVL 10

Author Comment

by:victornegri
ID: 19009795
I ended up using DumpACL in a batch file with link tables... but I'm learning how to use powershell so maybe in the future, that will be the solution.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In a multiple monitor setup, if you don't want to use AutoCenter to position your popup forms, you have a problem: where will they appear?  Sometimes you may have an additional problem: where the devil did they go?  If you last had a popup form open…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Basics of query design. Shows you how to construct a simple query by adding tables, perform joins, defining output columns, perform sorting, and apply criteria.

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now