amyassein
asked on
How to list the folders that a specific group got access on?
Hello,
Kindly, i am looking for a script that can look for all the folders that a specific group is listed in their ACL. For example, a security group called "PA" that has access on all the public affairs folders. I need to list the names of these folders in an excel sheet.
Appreciate your prompt response.
Yassien
Kindly, i am looking for a script that can look for all the folders that a specific group is listed in their ACL. For example, a security group called "PA" that has access on all the public affairs folders. I need to list the names of these folders in an excel sheet.
Appreciate your prompt response.
Yassien
ASKER
Skyking,
Thank you for your nice comment. However, i think you didn't understand my question at all. Well, i know that ACL is the list that holds the ACEs for folders and files. All i asked is, i need a script to show me the folders that a group have access on it. In other words, to show me the folders that are listing the group as an ACE. By this way, i can know which folder this group access on.
Thank You
Thank you for your nice comment. However, i think you didn't understand my question at all. Well, i know that ACL is the list that holds the ACEs for folders and files. All i asked is, i need a script to show me the folders that a group have access on it. In other words, to show me the folders that are listing the group as an ACE. By this way, i can know which folder this group access on.
Thank You
ASKER
Skyking,
By the way, i almost forgot, speaking about ICACLS, well, i use the more extended tool "XCACLS" but the problem is that this tool will give you several ACEs in the folders which are not necessary for me. All i care is only one group (one ACE entry) in the folders to be shown. But again, i need the script to show the names of the folders that the group got access on , not to show the ACEs of folders.
Thank You
By the way, i almost forgot, speaking about ICACLS, well, i use the more extended tool "XCACLS" but the problem is that this tool will give you several ACEs in the folders which are not necessary for me. All i care is only one group (one ACE entry) in the folders to be shown. But again, i need the script to show the names of the folders that the group got access on , not to show the ACEs of folders.
Thank You
ASKER
Any additional ideas yet from any expert?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you.
I found the solution.
I found the solution.
ACLs are part of the file system and are applied on the folders and files themselves, not on the user group, user account or anywhere else.
You would need to loop through each folder in your file system and access its secuirty properties. As for writing a script to do this, it shouldn't be that difficult however I am not a scripting expert.
You could try using ICACLS to generate a report of the ACL for the folders in question. You could also try looking at the Windows SysInternals tools as they have some pretty robust tools for NTFS.