• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 399
  • Last Modified:

Check if the permissions on not inherting from parent

On file server I want to check if the sub folders are inheriting the permissions from the parent. If not get the list of folders to a file.
I don't want to do manually. any script or tool would be helpful.I tried dumpsec but didn't leave the output.
0
Malli Boppe
Asked:
Malli Boppe
  • 2
  • 2
2 Solutions
 
Krzysztof PytkoActive Directory EngineerCommented:
I don't know if this tool does do it for you but you may check trail-version of Security Explorer from ScriptLogic
http://www.scriptlogic.com/products/security-explorer/

It allows simply to enumerate folder ACLs, so maybe it is also somehow possible to get information about inheritance, If not, you can always export the results to Excel file and analyze them using built-in macro (VBS)

If you're interested, we may try to do that togheter.

Regards,
Krzysztof
0
 
Rahul_GadeCommented:
I belive you can easily achive this using VBScript with the help of File System Object (FSO)
Just to begin with Try:

Set oFSO  = CreateObject("Scripting.FileSystemObject")
Set oADSSecurity     = CreateObject("ADsSecurity")

set oTargetSD = oADsSecurity.GetSecurityDescriptor("FILE://" & Cstr(sTarget))
set oDACL = oTargetSD.DiscretionaryACL

Then getting AccessControlEntry (ACE) from AccessControlList (ACL) can help you to check everything using some mask flags, i.e. some anding and oring can give you required results.

I belive this should help you to get started on writing your own script in a way you want. Almost everything that you want to achive can be done here, so why do you need a paid product to produce some output for you?
0
 
Malli BoppeAuthor Commented:
tried the below script on windows 2000 file server but the output file is empty.
http://gallery.technet.microsoft.com/ScriptCenter/39f4cc07-7781-4bbd-afe8-fc4d7f75d949/
0
 
Rahul_GadeCommented:
Are you sure your WMI service was active and you appropriatly changed the values of variables before running the script, Just to confirm: MY_ROOT_FOLDER, strComputer?
I do not have access to 2000 file server, but the article itself tells us that this script has been verified on 2000 server, so I guess problem is with your enviornment or the modifications needed in script to accomodate your enviornment.

-Rahul
0
 
Malli BoppeAuthor Commented:
I am sure that I have checked but will try again.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now