2

One of our users is requesting a list of the users and groups that have access to two folders on the network, as well as all of the subfolders of both of these folders. There are hundreds, if not thousands, of subfolders. Is there an automated way that I can do this?

Citizen Chin
  • 532
  • 1
  • 12
  • 21

3 Answers3

1

I would use get-acl from powershell:

get-childitem -recurse | where {$_.psiscontainer}|get-acl

this:

  1. gets the directory list (recursivly)
  2. if it so happens that the item on the pipeline is a container (folder)...
  3. retrieve the ACL list
Jim B
  • 23,938
  • 4
  • 35
  • 58
0

cacls.exe should do what you require, its a bit hard to read but that comes with the territory of doing such a task on command line.

Bart De Vos
  • 17,761
  • 6
  • 62
  • 81
Flash
  • 1,290
  • 7
  • 10
0

You might also try the SolarWinds tool for this, though it's not great at recursion.

Driftpeasant
  • 3,207
  • 2
  • 20
  • 28
  • I'll give it a try. I'm currently running Systernals AccessEnum, which might be too granular. It appears that it's listing permissions for every file within the folders and subfolders, and not just the folder and subfolder permissions. – Citizen Chin Nov 29 '11 at 16:36