Removed.

I have to generate some reports for management that show who has access to each folder on various shares. The difficulty is that they want it in "username" only format, so i need a way to enumerate the group membership. For example, if a folder has a an AD group called FinanceAcccess to give modify rights, I need the report to show that bill, George, betty, that are members of FinanceAccess, have modify rights. I've got loads of ways of exporting it as groups, but none of the tools I've tried can interogate AD to enumerate group membership.

Any ideas, suggestions, comments.

apalmer

iTrader: (8)

Simply, your going to have problems with native tools, you could script it with vb if you had the time, but when do we ever have time for such things.

Look into script logic, great tool for auditing and reporting on AD

@d

Removed.

Time is something I never have, and we have to audit a fileserver with around 7 million files and thousands of folders. I did it by hand last time, using treesize, excel, word, and lots of manipulation.

HankScorpio

If you've got the groups (we use showacls) there are loads of vb scripts on the internet that will enumerate the groups for you.

enumerate group members - Google Search

maybe a vlookup or two and you're off.

There's a few vb experts on here you could run the script past if that's not one of your specialities.

Removed.

I'm more of a hardware and OS guy. Scripts and macros make my head go Unfortunately both our script bunnies left last year and haven't been replaced. Hence the search for a ready made or easy to understand and adapt methodology. Especially as we're now expected to audit the server every 6 months. I'm waiting for the other shoe to drop when management remember the FTP server.