Solved

Security Matrix for user and group permissions

Posted on 2009-04-07
2
2,036 Views
Last Modified: 2012-05-06
I have been looking for a way to show clients/managers an easy to read visualization of what users belong to what groups and what permissions they have for their folders.

In the past I would just create an excel spreadsheet and update it by hand but it seems there would be an easier way to really show this to someone who may or may not have much technical knowledge.

I am looking for any tools or templates that would allow me to get this information and/or generate a report for a good way to show this.

2003 based file shares with active directory permissions.

0
Comment
Question by:mgthomas0
2 Comments
 
LVL 15

Assisted Solution

by:zelron22
zelron22 earned 50 total points
ID: 24093618
Access Enum and Share Enum will give you what users/groups have permission to what.
http://technet.microsoft.com/en-us/sysinternals/bb545046.aspx

0
 
LVL 18

Accepted Solution

by:
Americom earned 75 total points
ID: 24094159
See if these tools help. The one that you need to pay gives you more option such as report permission in excel, html, and pdf formats etc.

You can use a free tool "SubInACL" from Microsoft:
http://www.microsoft.com/DownLoads/details.aspx?familyid=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en
SubInACL is a command-line tool that enables administrators to obtain security information about files, registry keys, and services, and transfer this information from user to user, from local or global group to group, and from domain to domain.

http://technet.microsoft.com/en-us/sysinternals/bb664922.aspx
This tool shows you the accesses the user or group you specify has to files, Registry keys or Windows services

or if you want to spend some $ on another product specifically for file server from ScriptLogic:
http://www.scriptlogic.com/products/security-explorer/

Or if you have the more $ to spend, you can get the ESR from ScriptLogic:
http://www.scriptlogic.com/products/enterprisesecurityreporter/
This product is more than just for file/folder permission, it is also to report Active Directory object status etc.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
How important is it to take extra precautions to protect your online business? These are some steps you can take to make sure you're free of any cyber crime.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now