How to list the folders that a specific group got access on?

amyassein
amyassein used Ask the Experts™
on
Hello,

Kindly, i am looking for a script that can look for all the folders that a specific group is listed in their ACL. For example, a security group called "PA" that has access on all the public affairs folders. I need to list the names of these folders in an excel sheet.

Appreciate your prompt response.

Yassien
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
I think your understanding of NTFS and ACLs may be incorrect.

ACLs are part of the file system and are applied on the folders and files themselves, not on the user group, user account or anywhere else.

You would need to loop through each folder in your file system and access its secuirty properties.  As for writing a script to do this, it shouldn't be that difficult however I am not a scripting expert.

You could try using ICACLS to generate a report of the ACL for the folders in question.  You could also try looking at the Windows SysInternals tools as they have some pretty robust tools for NTFS.

Author

Commented:
Skyking,

Thank you for your nice comment. However, i think you didn't understand my question at all. Well, i know that ACL is the list that holds the ACEs for folders and files. All i asked is, i need a script to show me the folders that a group have access on it. In other words, to show me the folders that are listing the group as an ACE. By this way, i can know which folder this group access on.

Thank You

Author

Commented:
Skyking,

By the way, i almost forgot, speaking about ICACLS, well, i use the more extended tool "XCACLS" but the problem is that this tool will give you several ACEs in the folders which are not necessary for me. All i care is only one group (one ACE entry) in the folders to be shown. But again, i need the script to show the names of the folders that the group got access on , not to show the ACEs of folders.

Thank You
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
Any additional ideas yet from any expert?


Head of ICT
Top Expert 2009
Commented:
Hi there,
While scripting this would be possible, it's going to take a while to do. Getting the information is not as straightforward as you might think, using vbscript you have to read the security descriptors, which in itself isn't simple, then store all of this info and then output it in a readable format.
It may be more efficient for you to use a 3rd party utility.
How about trying dumpsec : http://www.systemtools.com/somarsoft/
I personally haven't used it, but it is free so you've got nothing to lose!

Author

Commented:
Thank you.

I found the solution.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial