Is there a program I can use to find blocked inheritance?

We have a file server with many folders.
Someone once-upon-a-time put inheritance blocking on many of them.

Is there an easy way to find out which folders have had inheritance blocked?

Thanks
Phil
LVL 1
philkryderAsked:
Who is Participating?
 
Will SzymkowskiConnect With a Mentor Senior Solution ArchitectCommented:
I am assuming that you are talking about NTFS permissions? You are looking for deny permissions on directories?

You can use SolarWinds Permission Analyzer (free) - http://www.solarwinds.com/products/freetools/permissions_analyzer_for_active_directory/

You can also use powershell to accomplish this. Use the below syntax...

Get-Childitem -Path <rootpath> -recurse | get-acl | out-file c:\directories.csv

Open in new window


Will.
0
 
philkryderAuthor Commented:
I'm actually looking for inheritance being blocked.
is that the same?
I don't think so...
0
 
yo_beeConnect With a Mentor Director of Information TechnologyCommented:
You can try this Powershell Script.

$dir = 'Replace with parent folder directory path '

Get-ChildItem  $dir -Directory -Recurse  ? {
 Get-Acl $_.FullName | % {
 $_.GetAccessRules($true, $true, 'System.Security.Principal.NTAccount') |
 ? {!$_.IsInherited}
 }
 }

Open in new window


Or

$dir = 'Replace with parent folder directory path '
Get-ChildItem $dir  -Recurse | ? {$_.PSIsContainer} | ? {
 Get-Acl $_.FullName | % {
 $_.GetAccessRules($true, $true, 'System.Security.Principal.NTAccount') |
 ? {!$_.IsInherited}
 }
 }

Open in new window

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.