Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

SharePoint ACL testing.

I will soon have to look at some access control lists/ permissions on directories in SharePoint (version yet to be revealed) for a data protection piece of work. Just wondered if there is any PowerShell cmdlets, similar to get-acl which you can run over a traditional windows file server which could be of use, or if the acl's are actually in the database associated with sharepoint rather than the objects themselves. I did read many years back checking permissions in SharePoint was horrendously complex but I hope things have improved.
ASKER CERTIFIED SOLUTION
Avatar of Jeff Glover
Jeff Glover
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pau Lo
Pau Lo

ASKER

Thank you will try it out. Does sharepoint use Ad groups for governing access or are the groups defined within Sharepoint itself?
Ah. The $64000 question. yes and yes and even yes. It can use AD groups, SharePoint Groups, and/or AD users (directly). In a simple farm, in a perfect world, you would use AD groups. Easier to manage and prevents all sorts of issues. However, I have never seen a Farm in a perfect world. In many cases. AD user groups would be initially setup for basic site access and as you add lists and subsites, it would devolve into hodgepodge of AD groups, SharePoint groups and direct AD user permission assignments. In a company where the AD group is separate from the Sharepoint admins, it could be worse.
Avatar of Pau Lo

ASKER

Thanks Jeff.