Discussion Locked

Printing NDS trustee list

0 helpful
8 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
As part of an internal audit process, we've been asked to printout all the users with which file access they have been granted. Is there a simple way to do this or a utility to use. We are using NW 5.1.

8 replies

by jcharris

Since the Security.exe program is no longer available, you'll have to make do with a batch file approach, using NLIST. Try the following:
Create a blank file on the root of your C: drive called secure.txt.
Edit another file called Secure.bat andcopy the following lines into it:

:: SECURE.BAT
@echo off
:: Batch file to check Object Trustee Access Control Lists
:: Make sure the input text file exists
If not exist C:\secure.txt cd. >c:\secure.txt
::
:: Change context to the root.
::
cx /r
:: Let's put a time & date header on the text file:
Echo. >>C:\secure.txt
Echo ------------------------------------------------------------- >>C:\secure.txt
systime >>C:\secure.txt
Echo ------------------------------------------------------------- >>C:\secure.txt
Echo. >>C:\secure.txt
Echo. >>C:\secure.txt
Echo User Rights
Echo ------------------------------------------------------------- >>C:\secure.txt
::
Echo Checking User rights.
Echo Please be patient...
:: This will list all users and their rights as well as other objects.
NLIST Organization SHOW "Object Trustees (ACL)" /S >> C:\secure.txt
NLIST "Organizational Unit" SHOW "Object Trustees (ACL)" /S >> C:\SECURE.TXT
::
Echo End of listing
Echo ------------------------------------------------------------- >>C:\secure.txt
Echo End of listing >>C:\secure.txt
::
:: End of secure.bat

Login as admin and CX to [ROOT] (the batch file will also do this), use the /S flag to get more than the current container. To examine a single container, rem out the cx /r line and remove the /S flag.

by stoews

We tried this approach however we received trustee list for the "object" rights not the "directory" rights. I require a listing by directory as to who has access.

by jcharris

Use Tree>c:\tree.txt at the root of the volume to get the directory structure. Edit the file to change to each directory and then do a tlist to your audit file.

This discussion is closed to new replies.