Need a tool for finding open shares

Posted on 2012-09-13
Last Modified: 2013-12-06
I am looking for a tools that I can use to scan Windows machines in an active directory domain and look for open shares.  I'm looking for the tool to do the following:

1. Scan at either the domain level, or a range of IPs
2. Enumerate the shares available on the machine
3. Identify the defined access on the shares for the machine.  (Report all the defined access on the share, not just a single user or group that I have to define during the scan.)
4. NTFS permissions defined on the filesystem accessible by the share.

A free tool would be preferred, but we are having problems locating a good tool that will do a wide scan (free or not).

If not a single tool, is there a combination of tools to accomplish what I need?

Any suggestions?

Question by:VIBT
    LVL 5

    Accepted Solution

    This tool may help. It's somewhat old, but the SysInternals guys (acquired by Microsoft in 2006) are about as good as they come at designing free, extremely light and useful Admin tools.
    LVL 52

    Assisted Solution

    Share enum is cool, yes, but it does only scan share permissions and disregards NTFS permissions of the folders underneath. So  unless I'm mistaken, it's somewhat useless when it comes to judging who has/hasn't access to files.

    It seems as though there is a tool that can do both: dumpsec. Read

    Author Closing Comment

    Thanks very much to both of you!  This has given us what we need!

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Join & Write a Comment

    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now