Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Restore Multiple User Access Rights

Posted on 2009-12-22
Medium Priority
Last Modified: 2013-12-05
A junior Admin was allowed in the AD to give access rights to some resources. needless to say hundreds of users for various resouces (Folders & Files) are now without access and some that should not, now are able. We do have a snapshot from Netapp from a week and even 2 weeks ago to compare and make it correct manually. The question is, does anyone know of an available tool that will allow us to restore the user and groups, access rights utilizing the snapshot information dating back a week or 2 ago. If so can you please tell me where or what. We have Terra Bytes ot data that we have to siff through. We are running MS Windows Serve 2003 Ent

Thanks in advance
Question by:cyberchrisrock
  • 2
LVL 40

Expert Comment

by:Vadim Rapp
ID: 26112335
If this is about permissions on folders and files, I would do this:

1. export the data from the snapshot in some form that make it more or less easy to read and parse
2. write the program or script that would read that export
3. the program to parse the directories recursively from the root, and issue CACLS on each file found in the export.

One variation is that if the snapshot is going by users, then maybe I would import #1 into the database, because it would be more effective to go in #3 by files rather than by users.

However, all this is based on assumption in the first line. Here's what I don't quite understand: permissions on files and folders are not set in active directory. Then, what exactly has the junior admin changed, and where?

Author Comment

ID: 26115007

Thank you for your reply. I have found a product by a company called quest soft ware that should be the answer. I will post once i install and test it.


Accepted Solution

cyberchrisrock earned 0 total points
ID: 26138627
Found a Soloution @ Scriptlogic.com They have a product called "user Centric Security management Solution.

Thanks for your reply(s)

Featured Post

Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows Explorer lets you open cabinet (cab) files like any other folder. In VBA you can easily handle normal files and folders, but opening and indeed creating cabinet files takes a lot more - and that's you'll find here.
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Simple Linear Regression
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

575 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question