User Permissions

Well, it depends on what kind of permissions you are looking for.

First off, the User Manager program gives you some information on each user account.

YOu can always do a Net User command to get user account information not readily available in User Manager. To do this for a domain account, here is the syntax:
NET USER username /DOMAIN

Yes, the /DOMAIN switch is really "/DOMAIN", not the name of your NT domain.

You could also use the IFMEMBER.EXE app from the NT Resource Kit. It gives you the groups this user belongs to.
For this, here is the syntax:
IFMEMBER domain\username /LIST

This time domain/username is your NT domain name and the user account you want to look at.

Hope this helps.

There is a utitlity in the NT Resource Kit (not sure if in 2000 or NT 4.0) called showcals.exe or showcal.exe that you run against a folder or file and gives you all the permissions.

Oh, so you just want to run something that will lists the user rights (access control lists) on a group of folders&files? Easy. XCACLS.EXE from the Resource Kit will do that. It can generate lists of every user and their rights on a folder or file level. You can export the lists to text files for analysis. I have used it myself.
It is also a free download from Microsoft:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/xcacls-o.asp
(please remove any spaces)

Hope this helps.

You might also want to try DumpSec aka DumpACL you can get it at:
http://www.systemtools.com/somarsoft/

Just ran across the same problem only across multiple drives.
Go to http://www.smallwonders.com/
and take a look at their Security Explorer.
You can download the trial and it will search by group or user. Easy fast.
Good Luck
0 bytes

This question was closed by the author