Check if the permissions on not inherting from parent

Posted on 2011-10-23
Last Modified: 2012-05-12
On file server I want to check if the sub folders are inheriting the permissions from the parent. If not get the list of folders to a file.
I don't want to do manually. any script or tool would be helpful.I tried dumpsec but didn't leave the output.
Question by:Malli Boppe
    LVL 39

    Accepted Solution

    I don't know if this tool does do it for you but you may check trail-version of Security Explorer from ScriptLogic

    It allows simply to enumerate folder ACLs, so maybe it is also somehow possible to get information about inheritance, If not, you can always export the results to Excel file and analyze them using built-in macro (VBS)

    If you're interested, we may try to do that togheter.

    LVL 7

    Assisted Solution

    I belive you can easily achive this using VBScript with the help of File System Object (FSO)
    Just to begin with Try:

    Set oFSO  = CreateObject("Scripting.FileSystemObject")
    Set oADSSecurity     = CreateObject("ADsSecurity")

    set oTargetSD = oADsSecurity.GetSecurityDescriptor("FILE://" & Cstr(sTarget))
    set oDACL = oTargetSD.DiscretionaryACL

    Then getting AccessControlEntry (ACE) from AccessControlList (ACL) can help you to check everything using some mask flags, i.e. some anding and oring can give you required results.

    I belive this should help you to get started on writing your own script in a way you want. Almost everything that you want to achive can be done here, so why do you need a paid product to produce some output for you?
    LVL 23

    Author Comment

    by:Malli Boppe
    tried the below script on windows 2000 file server but the output file is empty.
    LVL 7

    Expert Comment

    Are you sure your WMI service was active and you appropriatly changed the values of variables before running the script, Just to confirm: MY_ROOT_FOLDER, strComputer?
    I do not have access to 2000 file server, but the article itself tells us that this script has been verified on 2000 server, so I guess problem is with your enviornment or the modifications needed in script to accomodate your enviornment.

    LVL 23

    Author Comment

    by:Malli Boppe
    I am sure that I have checked but will try again.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    This is pretty cool.  The purpose of this VB Script is to help you document where JAR (Java ARchive) files and specifically java class files are located so that you can address issues seen with a client or that you can speak intelligently with a dev…
    Know what services you can and cannot, should and should not combine on your server.
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now