Alternative to a folders security tab

pma111
pma111 used Ask the Experts™
on
If I right click a folder on a network share, I can no longer see the security tab to see which users are members on the access control list. This is via a Windows 7 PC connected to a share on a 2008 server. Is there any alternative tool or method to get this information if the security tab has (presumably??) been hidden by group policy as we some-times need this information for audit purposes?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
If you log on to the computer/server that hosts the share can you see the security info for the share? would this be a viable option? or are you explicitly trying to retried security information of a share remotely?

Author

Commented:
Ideally wouldnt want to login to the server, just something quick and easy - or that can report out the information for all shares/directories/sub directories
Commented:
if you know the name of the server that hosts the shares and you can access mmc etc:

In Administrative Tools, click Share and Storage Management.

In the console tree, right-click Share and Storage Management, and then click Connect to another Computer.

In the Connect to Another Computer dialog box, click Another computer. Then type the name of the server you want to connect to, or click Browse to search for a remote computer.

Click OK.

with this i admin our shares and all permissions/security.

Is this any help?
11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

Author

Commented:
Is that just share permissions, though, and not NTFS/directory permissions?

Commented:
Once you are connected to the remote computer and can see all the shares you can double click a share and you will get this windows that allows you to see both share permissions and NTFS: context menu of remote share and storage management
Senior Active Directory Engineer
Top Expert 2012
Commented:
Hm, have you tried using icacls command in command-line? It is not as clear as GUI but should give you an overview.

Please try this
icacls \\server\share

Open in new window


Regards,
Krzysztof

Author

Commented:
Can any domain user run icacls against any server/share, or are there limitations on which users can list the ACL per server/share? Or perhaps which will report the output....

Author

Commented:
And is icacls reporting share permissions, or directory permissions, is there any command line to get share permissions if these are just directory permissions?

Commented:
I would say that users need to have permissions to read permissions if that makes sense? with some lower level users that we need to have some level of access I think remember having to let them have the permissions to view to permissions! ... I hope you follow!
Distinguished Expert 2018
Commented:
You can list share permissions remotely using üpowershell, see http://www.peetersonline.nl/2008/11/listing-share-permissions-for-remote-shares/

I would start by questioning if that security tab is really hidden on purpose.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial