Folder Permissions

I know how to look at a folder's properties and determine which entities
(users, groups) have permissions to that folder. However, when I view a
group's properties in Active Directory, it only tells me the group's members,
and if the group is a member of other groups. Is there an easy way to
determine what files or folders the group has access to, without going
through every folder on the server and looking at the properties (which could
take forever)? There is bound to be an easy way to do this, and I feel like a
fool for not knowing how. Any help will be sincerely appreciated.

There are a number of tools you can use. But please keep in mind, the actual
folders on a server need to be enumerated, not AD, to find what groups have
permissions on the resources themselves. Below are links with suggestions on
how to enumerate drive permissions that will provide a report. My suggestion
is to get a report on your AD users and what groups they belong to, so you
can compare the two. If you need a how to on enumerating users and their
group memberships, please post back.

Enumerate Folder Permissions

JSI Tip 9901. How can I enumerate the folder permissions on a drive or
folder in CSV format?

JSI Tip 8670. How can I report the NTFS folder permissions on a computer's
shared folders?

Use Xcacls To Enumerate Ntfs Permissions... ( Vbscript )

Security Explorer - ScriptLogicSecurity Explorer inspects, documents, and
manages Windows NT/2000/XP security on NTFS drives, Registry keys and file
shares allowing administrators to ...

Solution: Please login as a administrator. right click on particular folder
and select properties then go security tab. you can watch wich policy apply
on wich user.

Check out AccessEnum from sysinternals:
http://technet.microsoft.com/en-us/s.../bb897332.aspx

There are also additional useful free tools.

[kuki1]

try Folder Permissions Reporting - Secreport Enterprise by Smart-X