Folder Permissions

I know how to look at a folder's properties and determine which entities
(users, groups) have permissions to that folder. However, when I view a
group's properties in Active Directory, it only tells me the group's members,
and if the group is a member of other groups. Is there an easy way to
determine what files or folders the group has access to, without going
through every folder on the server and looking at the properties (which could
take forever)? There is bound to be an easy way to do this, and I feel like a
fool for not knowing how. Any help will be sincerely appreciated.
Thanks in advance,
flux

In news:3A4D9D27-C70D-4916-9A6E-6B827C393A11@microsoft.com,
flux blocker <fluxblocker@discussions.microsoft.com>, posted the following:
> I know how to look at a folder's properties and determine which
> entities (users, groups) have permissions to that folder. However,
> when I view a group's properties in Active Directory, it only tells
> me the group's members, and if the group is a member of other groups.
> Is there an easy way to determine what files or folders the group has
> access to, without going through every folder on the server and
> looking at the properties (which could take forever)? There is bound
> to be an easy way to do this, and I feel like a fool for not knowing
> how. Any help will be sincerely appreciated.
> Thanks in advance,
> flux

There are a number of tools you can use. But please keep in mind, the actual
folders on a server need to be enumerated, not AD, to find what groups have
permissions on the resources themselves. Below are links with suggestions on
how to enumerate drive permissions that will provide a report. My suggestion
is to get a report on your AD users and what groups they belong to, so you
can compare the two. If you need a how to on enumerating users and their
group memberships, please post back.

Enumerate Folder Permissions

JSI Tip 9901. How can I enumerate the folder permissions on a drive or
folder in CSV format?
http://windowsitpro.com/article/arti...sv-format.html

JSI Tip 8670. How can I report the NTFS folder permissions on a computer's
shared folders?
http://windowsitpro.com/article/arti...d-folders.html

Use Xcacls To Enumerate Ntfs Permissions... ( Vbscript )
http://cwashington.netreach.net/depo...tType=vbscript

Security Explorer® - ScriptLogicSecurity Explorer inspects, documents, and
manages Windows NT/2000/XP security on NTFS drives, Registry keys and file
shares allowing administrators to ...
www.scriptlogic.com/products/security-explorer

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

flux blocker wrote:
>I know how to look at a folder's properties and determine which entities
>(users, groups) have permissions to that folder. However, when I view a
>group's properties in Active Directory, it only tells me the group's members,
>and if the group is a member of other groups. Is there an easy way to
>determine what files or folders the group has access to, without going
>through every folder on the server and looking at the properties (which could
>take forever)? There is bound to be an easy way to do this, and I feel like a
>fool for not knowing how. Any help will be sincerely appreciated.
>Thanks in advance,
>flux
Solution: Please login as a administrator. right click on particular folder
and select properties then go security tab. you can watch wich policy apply
on wich user.

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forum...er-ad/200904/1

Hello flux,

Check out AccessEnum from sysinternals:
http://technet.microsoft.com/en-us/s.../bb897332.aspx

There are also additional useful free tools.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I know how to look at a folder's properties and determine which
> entities
> (users, groups) have permissions to that folder. However, when I view
> a
> group's properties in Active Directory, it only tells me the group's
> members,
> and if the group is a member of other groups. Is there an easy way to
> determine what files or folders the group has access to, without going
> through every folder on the server and looking at the properties
> (which could
> take forever)? There is bound to be an easy way to do this, and I feel
> like a
> fool for not knowing how. Any help will be sincerely appreciated.
> Thanks in advance,
> flux