asked on

Document Useraccesses on a SBS2011.

Hey,

first of all sorry for my bad english skills. I am from germany.

I am currently encountering a huge problem. I want to upgrade my whole server system to Windows Server 2016.
The problem:
I have to document all of the User accesses given to each folder.

Is there any Software or possibility to get the information of the accesses so I can reconfigure them into my new server?

I hope that you are able to understand my problem :D
Thanks :)

SOLUTION

CES

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

McKnife

I agree. Robocopy will keep permissions. Syntax example:

robocopy d:\somedir \\newserver\someshare /e /DCOPY:T /COPYALL /LOG:c:\somefolder\log.txt /R:0 /W:0 /NP /SL

Open in new window

ASKER CERTIFIED SOLUTION

Burhan Syp

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Burhan Syp

ASKER

Thanks to CES IT´s hint with PowerShell i pretty easy managed to find a solution via google.
First of all the solution was not created by me but by this website: www.phyllisinit.wordpress.com

Let me explain:
You have to run PowerShell and use the following script:

get-childitem \\fileshare\folder -recurse | get-acl  | select-object path,owner,accesstostring,group | export-csv “C:\security.csv”

Open in new window

The file will be saved in "C:\security.csv" by default.
The .csv-file that gets created can be easily imported into excel. It is, as far as I comprehended it, written in commas (Excel 4.0-Standard). Make sure that you convert the .csv-file with "commas" and "blanks". It is easier to read the table that way.

Sadly the custom given names in the network will not be saved. It would be good if you save each User by his name seperately in a database.

Qoute from the website (in case the website goes offline after some years):
Get-childitem – is used to access the folders recursively, (-recurse <— recursive switch is needed to access subfolders as well)
get-acl – is used to display the security properties of the files in that folder, it doesn’t seem to have a recursive switch.
select-object path,owner,accesstostring,group – These information will appear in the columns of your exported CSV file. ” get-acl C:\folder |Format-List ” displays the result below.

Path : Microsoft.Windows PowerShell.Core\FileSystem::C:\folder
Owner : phyllispc\user
Group : phyllispc\Domain Users
Access : BUILTIN\Administrators Allow FullControl
NT AUTHORITY\SYSTEM Allow FullControl
phyllispc\user Allow FullControl

export-csv “C:\security.csv” – export data to C:\security.csv

Things to note: If you have mapped a network drive and you tried to use the network share drive in this script, you are likely to encounter an error about being unable to find the Network drive. Please use the full network path (Eg \\network\share ).

Thanks for the quick support and the hints!
Burhan Syp :)

Lee W, MVP

You're running SBS2011. SBS MUST be in a domain. So it IS a domain. Migrate it.

McKnife

And please note that robocopy will work, too. No need to document the perms in order to migrate.

Burhan Syp

ASKER

Thanks to CES IT I managed to find a optional solution.