Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

NTFS permissions audit - expanding group membership

Posted on 2009-05-14
3
Medium Priority
?
759 Views
Last Modified: 2012-05-07
How do I audit NTFS permissions on a file server so that groups are expanded to show all users who have access?
I need to submit a report to HR of who has access to each folder on our file server. Users are assigned to groups which are given permissions on individual NTFS objects. But I need a report which expands to show the users per object.
0
Comment
Question by:HobartSmelter
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 49

Expert Comment

by:Akhater
ID: 24392598
Auditing will actually show you the user that accessed the file not the group


1) Enable Audit of object access on your file server (or where you have the files to be audited) enable success or failure depending on what you need
2) go to the folder of file you want to audit right click -> properties -> security -> advanced -> auditing
3) set your audit requirements
0
 
LVL 15

Accepted Solution

by:
Rob Stone earned 2000 total points
ID: 24393788
You can get this information a few ways although I don't enjoy your task here!

DumpACL has a trial version usage which will put all the groups against share in a nice report for you.  It may have an option for users but I don't know as I never needed that.

To resolve members of groups you can use a mix of dsquery and dsget.  Both have plenty of options and a few examples are in the syntax help.
0
 

Author Closing Comment

by:HobartSmelter
ID: 31581765
Thanks Stoner, after a bit of trial and error we ended up using the Microsoft AccessChk with a few batch scripts to get the info we needed.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question