Solved

AccessChk

Posted on 2013-06-10
7
998 Views
Last Modified: 2013-06-14
Has anyone every run the AccessChk utility from Sys internals?

I am a bit perplexed by the findings?

I've run accesschk "domain users" across my H:\profile\desktop folder, and it returns lots of entries (i.e. indicating domain users can access my H:\profile\desktop folder".

It I run CACLS over the same folder, theres no entry for "domain users", so all I can imagine is CACLS is purely NTFS (directory) permissions, whereas accesschk is a cumulative of share/directory permissions?

Any ideas?
0
Comment
Question by:pma111
  • 4
  • 3
7 Comments
 
LVL 53

Expert Comment

by:McKnife
ID: 39235120
> i.e. indicating domain users can access my H:\profile\desktop folder
Oh yeah? So how does it indicate that? accesscheck would list the permission type to the left of the filename (like "R" for read).
0
 
LVL 3

Author Comment

by:pma111
ID: 39235153
My impression was it only lists results where the user or group has permission on a specific file/folder? Is this not true? Does it also cover 'list folder contents' only entries? Or only read and write?
0
 
LVL 3

Author Comment

by:pma111
ID: 39235161
It seems a bit pointless if you have to supply a username or group over a directory your interested in (say 200 files) and you have to view each file to see what's to the left of the file name. Is there no way to filter down to only those files or directories a user or group can actually access ?
0
Shouldn't all users have the same email signature?

You wouldn't let your users design their own business cards, would you? So, why do you let them design their own email signatures? Think of the damage they could be doing to your brand reputation! Choose the easy way to manage set up and add email signatures for all users.

 
LVL 53

Expert Comment

by:McKnife
ID: 39235358
Did you look at the parameters? There are P's for all your needs.
0
 
LVL 3

Author Comment

by:pma111
ID: 39235374
Can you provide some example syntax to just list files that a specific user can access in a specific directory (and leave out those they can't ? )
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 39235392
For example this shows all files with read or write access
accesschk -rw username path
0
 
LVL 3

Author Comment

by:pma111
ID: 39235410
Many thanks
0

Featured Post

Wish Marketing would stop bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

Join & Write a Comment

Know what services you can and cannot, should and should not combine on your server.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now