2k3 file server security permissions

Point value changed by question poster.

Point value changed by question poster.

Could you put this into some context for us? If you can give some specifics on what you are trying to accomplish this will make answering the question a lot easier.

-Z

Well, I just want to export in an Excel sheet all the security permisions for folders on my file server.

Example:
folder d:\boby
security permisions:
Boby --> write
John --> read
silvana --> modify

There is a program called Perms.exe: User File Permissions Tool that is included in Windows Server 2003 Resource Kit Tools @ http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

The User File Permissions Tool is a command-line tool that displays user access permissions for a file or directory on an NTFS file system volume. It queries the permissions that are associated with a specific access control entry (ACE), displaying only the permissions that are granted by that particular ACE.

Example: D:\Program Files\Windows Resource Kits\Tools>perms.exe mindy "C:\Users Shared Fo
lders\Mindy" /s
produces:
C:\Users Shared Folders\Mindy\ perms: RWXDPOA

C:\Users Shared Folders\Mindy\My Documents\ perms: *RWXDPOA

Testing another non-authorized user's permissions on this folder produces:
C:\Users Shared Folders\Mindy\ perms: -------

C:\Users Shared Folders\Mindy\My Documents\ perms: -------

Just mark and copy the DOS window conents and save to a text file and then open into Excel and use the text import wizard delimited.

Its not fancy but works to document folders/file access premissions and its free. Hope this hekps.

There is a program called Perms.exe: User File Permissions Tool that is included in Windows Server 2003 Resource Kit Tools @ http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

The User File Permissions Tool is a command-line tool that displays user access permissions for a file or directory on an NTFS file system volume. It queries the permissions that are associated with a specific access control entry (ACE), displaying only the permissions that are granted by that particular ACE.

Example: D:\Program Files\Windows Resource Kits\Tools>perms.exe mindy "C:\Users Shared Fo
lders\Mindy" /s
produces:
C:\Users Shared Folders\Mindy\ perms: RWXDPOA

C:\Users Shared Folders\Mindy\My Documents\ perms: *RWXDPOA

Testing another non-authorized user's permissions on this folder produces:
C:\Users Shared Folders\Mindy\ perms: -------

C:\Users Shared Folders\Mindy\My Documents\ perms: -------

Just mark and copy the DOS window conents and save to a text file and then open into Excel and use the text import wizard delimited.

Its not fancy but works to document folders/file access premissions and its free. Hope this hekps.

There are no native reporting tools for W2K3, you can get a product called NetIQ Directory Security Administrator which you can download a 30 day eval for from http://www.netiq.com

Garry

Go to the command prompt and change directories to one level above the directory you would like to audit. For example if I was going to audit C:\windows\system32, I would type cd c:\windows\.
Next use the 'cacls' command and pipe it to a text file. In the before mentioned example it would look like this:
cacls system32 /t >c:\perms.txt

This will send a permission report to the file c:\perms.txt. It may take awhile to run depending on what you're looking at.
-Nate
-Nate

This question was closed by the author