Storage

Ask something
Discussion Locked

NTFS ACL Reporting/Auditing tool

0 helpful
12 replies

by s.day

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Can anyone recommend a production quality tool for auditing NTFS file permissions and Access Control Lists?

I have inherited a huge directory structure where permissions are applied by username at all levels of the structure.

Hence I don't know who to contact to explain my intentions to migrate to a new server.

Thanks

12 replies

by s.day

Hello, I used a microsoft cmd line tool in the end called "showacls" from the Windows Server 2003 Resource Kit

by cabbascia

I also took a look at that, it does work, however it's too granular as it also shows file level permissions. I found no way of restricting it to only folder permissions.

by sluppo_it

Hi,

from 1 January 2010 when I run NACL, it doesn't works. It shows an error like "Licensed for LFU Innsbruck only!" "Unlicensed or no MAC Address".

Can you help me?

Tnx a lot!

by omar.ounanian

I was just looking for something like this, and thought I'd share it. I do IT Audits (I'm an IT Consultant) for clients, and wanted something that would help me get a list of user and group permissions on file shares.

I downloaded a tool called Aprigo NINJA [http://www.aprigo.com/] (they have a free 2 week trial). It's a SaaS product that you point at a share, and enter the AD info, and it does the rest.

After the trial you have to pay (I think they do it by # of user).

by snake2332

Are there any tools that show the users nested in NTFS groups? I've seen a few tools that will show me which groups have rights to our shared folders, but none of them list the users that are in those groups.

I have bank operation people that want to see a report of who has rights to each of their shared folders. There are maybe a dozen folders for each bank. The GG's for each of these folders have between 3 and 400 users in them.

So far, I'm not finding an easy way to do this. Any help would be much appreciated, thanks!

by leethal22

I'm currently testing an application called NTFS Security Auditor which you can find at http://www.vyapin.com/products/ntfs-security-auditor/ntfs-security-auditor.htm. I was using Hyena until I noticed it not showing the users and nested groups on the shares I was scanning. I'm still looking at other applications because I'm scanning shares that some has over 200,000 permissions applied to them (I work for a large company) so these apps tend to lock up occasionally even running from a high end server with plenty of bandwidth and from the same subnet as the server hosting the share. Hope that app helps because that's the best I've found so far and I've tested over 6 different products so far.

This discussion is closed to new replies.