creative555
asked on
inventory of SHARED permissions on the SHARES
Hi,
I would like to get an inventory of groups and users SHARED permissions on the SHARES. SEe the screenshots.
not NTFS permissions, but SHARED permissions.
Thank you so much!
Perhaps you already written a scirpt like this.
I would like to get an inventory of groups and users SHARED permissions on the SHARES. SEe the screenshots.
not NTFS permissions, but SHARED permissions.
Thank you so much!
Perhaps you already written a scirpt like this.
If you are using W8 / 2012 or above, Get-SmbShare | select Name, SecurityDescriptor provides a list of DACLs.
Worth using the above if you're on 2012... also I suppose that means you could import registry hives from non 2012 servers for lanman and get their permissions infor for the shares if you're desperate.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Excellent script. I tested it and got a nice report. Thanks a lot!
Share permissions are stored in the registry in a binary glob.
Maybe someone has a clue on how to parse that binary glob, but I haven't found a way, instead I usually set up the security the way I want it in NTFS, and then replace the globs with a glob I saved from a share with everyone full.
To see for yourself, the file shares are located here:
Open in new window
Under the shares there is a key called security which contains ths binary permissions glob I've just been mentioning.