How to find out share permission from a hard drive?

okamon
okamon used Ask the Experts™
on
One of the pc totally dead, cannot even boot. but the hard disk still good. i can see all the data through USB adapter. I would like to know if it's possible I can find out the share permission on each folder from the hard disk?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Leon FesterSenior Solutions Architect

Commented:
You cannot find that information by looking at the HDD alone.
You need to access the ACL from the previous OS, and I've never come across an option to view that kind of information except on the machine where the shares were originally created.

Feel free to test that theory by moving a healthy drive to another workstation/server and then put it back.
Most Valuable Expert 2011
Top Expert 2011
Commented:
You can export them though. Mount the registry from USB DRIVE>Windows\System32\config\SYSTEM, and export this registry key....Mount it as TEMPHIVE

HKEY_LOCAL_MACHINE\TEMPHIVE\CurrentControlSet\services\LanmanServer\Shares

Then, set the .reg file so that it is in the proper format, instead of the loaded .reg hive....

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Shares

Then stopping /starting the server service backup should make the shares appear as they were before....

Author

Commented:
Hi johnb6767, I am not sure if I understand. you meant to go to Windows\System32\config\SYSTEM
But System is a file, cannot open it. how can mount it? and is there a way to just see all the network share instead of importing it?
Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

Most Valuable Expert 2011
Top Expert 2011
Commented:
You can see the shares in the mounted registry, but the security is all binary data......

Heres a guide on how to mount a registry hive....

http://www.osattack.com/walk-through/tutorial-how-to-mount-a-registry-hive/

Author

Commented:
the problem is I cannot even boot in to windows, how can I do that?
Most Valuable Expert 2011
Top Expert 2011
Commented:
Slave the drive, andmount the registry key as described in that article....

Its all going to be in hex format, but you can reformat the exported .reg file, so that it reads HKLM\System, instead of HKLM\TEMPHive\System...
 
Then just import it, and reboot....
Most Valuable Expert 2011
Top Expert 2011

Commented:
Glad it worked....

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial