Solved

How to determine explicit permissions

Posted on 2014-01-20
9
330 Views
Last Modified: 2014-01-21
Our long-time personnel manager is preparing to retire and his successor is transitioning over to his responsibilities.

The current user has explicit permissions (i.e. not part of a group) for various folders and files on our server.  I need to give the new user the same access.  Is there a way to easily determine all of the explicit permissions that have been granted to the current user??

Server O/S:  Windows 2000 Server w/ Active Directory
0
Comment
Question by:Kerry Wilson
9 Comments
 
LVL 57

Expert Comment

by:Mike Kline
Comment Utility
There are various tools that can help NTFS permissions reporter is decent   http://www.cjwdev.co.uk/Software/NtfsReports/Info.html

accessenum from Microsoft  http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx

You could also use a tool like subinacl to set the ACLs for the new user.

Thanks

Mike
0
 

Author Comment

by:Kerry Wilson
Comment Utility
The SysInternals program you mentioned is for Windows 2003 Server and higher.  Ours is Windows 2000 Server.

I'm checking further into the NTFS Permissions Reporter.
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
Looks like a case for subinacl.exe
"SubInACL is a command-line tool that enables administrators to obtain security information about files, registry keys, and services, and transfer this information from user to user, from local or global group to group, and from domain to domain" http://www.microsoft.com/en-us/download/details.aspx?id=23510
This download is for win2003. There is however also a subinacl for win2k as part of the nt4 and win2k resource kits. You may of course use the link I gave you and run it from win7 against your server.
0
 
LVL 6

Accepted Solution

by:
Biniek earned 500 total points
Comment Utility
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 53

Expert Comment

by:McKnife
Comment Utility
Did you understand, what subinacl can do for you? Pretty much exactly what you were asking for.
0
 

Author Comment

by:Kerry Wilson
Comment Utility
Yes, I think so.  But I didn't know where to find anything about the NT4 and W2K Resource Kits.  I've heard of Resource Kits but don't know anything about them.
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
Well, why didn't you ask? That's what we are here for, aren't we? :)
Download my link (as I wrote before) and use it from win 7 against your server.
If that one makes problems, I could mail you the old executable if you need it.
0
 

Author Comment

by:Kerry Wilson
Comment Utility
I didn't ask because the other two programs also did what I needed and I am a one-man IT department with 50 computers, more or less, in the building....just not enough hours in the day!  <grin>

Also, I don't have Win7....it's XP Pro.  I wasn't sure if it would work and, again, don't have time for a lot of experimentation.
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
Alright, good luck.
PS: what works on 2003 will work on xp, try it, if the task is not finished yet.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

Resolve DNS query failed errors for Exchange
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now