Avatar of Kevin M
Kevin M
Flag for United States of America asked on

Mass search for folder access permissions

I wish to scan a massive folder structure to see which folders a person had access to during his employment, i.e. the ones where he was given specific access to instead of a group he was a member of.

I found one called accesschk that I can run from a command prompt, but it doesn't seem to drill into the folders.  Has anyone seen a program which will do that and just spot out a text or csv file I can sort?
PowershellMicrosoft DOSWindows Server 2012

Avatar of undefined
Last Comment
Kevin M

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
NVIT

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Kevin M

ASKER
This isn't for my system, it's for a remote location and not my account. That program doesn't seem to do that.
NVIT

What results do you get?
Kevin M

ASKER
OK, now I understand what the program does. It doesn't search for one user but displays all users who have access to it, outside of the parent.

I can work with this, but I'd really like to get a script that searches for a specific user, rather than show me everything--which is kind of doesn't do as I expected a humongous list.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
NVIT

Since you're trying to get results for a certain user using AccessChk, I presume you've tried something like this to "...see which folders a person had access to..." and "...drill into the folders", which is what this does:
accesschk domain\username -d -s z:\sharename\folder

Open in new window

Kevin M

ASKER
Yeah, I'm having some luck using the AccessEnum program, outputting to text files, and using PowerShell to pull strings out that have his username. That's do for now. Thanks.