markr1963

Can anyone recommend a tool for the above? It will be a one-off (hopefully) exercise to appease the counter of beans so an evaluation would do.

Something that could report on file permissions would be handy too!

Ta muchly
Mark

Miles

What exactly are you after? A report on all the permissions set on objects in AD?

markr1963

Miles.
Not all objects. Permissions on users, groups and OUs would be enough. From the files point of view what groups/users have what permissions on a given folder, don't neeed to go down to file level.
Got hold of eval versions of Ultra Admin., Active Administrator and Security Explorer. Do you have any knowledge of these?

Cheers
Mark

Davie

Just use the computer management?

Or download adminpak.msi

Miles

Computer Management won't give a report like what I think you are after. I've got a script somewhere which will enum all files and folders with permissions, just need to find it first.

markr1963

Thanks Miles. That would be most useful.

Mark

Miles

Right, found it and tested out this morning. Cut and paste the code below, saving as a .vbs file. Change the parts in bold for your setup. It'll return a file, which I've called it perms.txt, which reports the permissions on two levels of directories below the source folder.

The formatting may get a bit screwed up, so drop me a note to miles.atkinson@bakerhughes.com if you want a copy of the .vbs I've got here. You'll also need xcacls.exe, so mail me if you need that also.

' AUTHOR: T.J. Cornish , Peregrine Capital Management
' DATE : 7/19/2002
' COMMENT: Requries XCACLS.EXE from the Windows 2000 Resource Kit.
' Enumerates two levels of directories below the source folder and runs XCACLS
' agains that list to show security for each directory
' Note: delete the output file and temp file after each run to prevent
' duplicate entries.
'===================

Option Explicit

Dim g_oShell, wrtlog, fso

Set g_oShell = CreateObject("Wscript.Shell")
Set fso = CreateObject("Scripting.FileSystemObject")

Dim toplevel, NextFolder, cSubs, cSub2, sFolder, sSubFolder, ReadLine
Dim SourceFolder, OutputFile, XCACLSLoc, TempFile

'*****************Parameters********************** ******
SourceFolder = "D:\Documents and Settings"
OutputFile = "d:\temp\perms.txt"
XCACLSLoc = "d:\temp\xcacls.exe"

'include path and xcacls.exe
TempFile = "d:\temp\dirlist.txt"

'File where directory paths are enumerated to
'*****************Parameters********************** ******
Set wrtlog = fso.OpenTextFile (TempFile , 8 , True)
Set toplevel=fso.GetFolder(SourceFolder)
Set cSubs=toplevel.SubFolders

'creates a collection of the 1st level folders
For Each sFolder In cSubs
' msgbox sFolder.path
wrtlog.WriteLine sFolder.path

'writes the first level folder path to the temp file
Set NextFolder=fso.GetFolder(sFolder.path)
Set cSub2=NextFolder.SubFolders
'creates a collection of the Sub folders of Each first level folder
' msgbox cSub2.path
For Each sSubFolder In cSub2
'Writes each second level folder path to the temp file
' msgbox sSubFolder.path
wrtlog.WriteLine sSubFolder.path
Next
' msgbox sFolder.path
Next

wrtlog.Close

'====================
' Starts read-back step.
' Calls XCACLS.EXE with each folder path gathered above and redirects XCACLS
' output to the specified output file

'msgbox "Finished first half"
Set wrtlog= fso.OpenTextFile(TempFile, 1)
'Reopens temp file for reading

'msgbox "Opened file OK"
Do While wrtlog.AtEndOfStream <> True
ReadLine = wrtlog.ReadLine
' msgbox ReadLine
g_oShell.Run "cmd /c " & XCACLSLoc & " """ & ReadLine & """ /C >>" & OutputFile, &H20000000, True
Loop

markr1963

Cheers Miles

Mark