PaulDotCom mailing list archives
Folder and File Permission
From: paradoxxxx at gmail.com (ben smith)
Date: Wed, 3 Jun 2009 14:12:58 -0400
I've used ScriptLogic's ESR as well, and it does produce some excellent reports. Bindview was a great tool, but I think it's a bit overpriced these days. On Wed, Jun 3, 2009 at 12:38 PM, Michael Dickey <lonervamp at gmail.com> wrote:
Several years ago I used a trial version of ScriptLogic's Enterprise Security Reporter. It did a rather excellent job of running permissions scans and group membership enumeration. I believe they still have the tool and you could run a trial if you're just looking for a one-time report. I do also second scripting it with PowerShell, but only because I do that. It might be a bit out of scope to learn scripting enough to be workable that way. On Wed, Jun 3, 2009 at 5:51 AM, <infolookup at gmail.com> wrote:Thank you all for the running start I will test the various tools that was mentioned and report back which one I think did the job best! Sent from my Verizon Wireless BlackBerry ------------------------------ *From*: Tim Mugherini *Date*: Tue, 2 Jun 2009 21:21:05 -0400 *To*: PaulDotCom Security Weekly Mailing List< pauldotcom at mail.pauldotcom.com> *Subject*: Re: [Pauldotcom] Folder and File Permission Dumpsec is your friend! Been around since NT 4 days and still useful. May I suggest tweaking the settings to only show files and subfolders that differ from parent and dumpt ACL perms and not share perms (since that is what it sounds like what your after). Can be exported out. *http://www.systemtools.com/download/dumpacl.zip. * On Tue, Jun 2, 2009 at 7:55 PM, Jody & Jennifer McCluggage < j2mccluggage at adelphia.net> wrote:Hello, You may want to check out PowerShell. It is very flexible and has a "get-acl" commandlet that will return the permission on a list of folders and files. Here is a quick rough example: get-childitem C:\example -recurse | get-acl | select-object path,owner,group,accesstostring | sort-object owner | export-csv c:\FileACL.csv This command will pipe out to a csv file the Owner, Group, Path, and Permission string (sorted by owner) for each folder and file for the given parent directory. If you are looking just for specific permissions, you can probably pipe it out to a where-object command. Of course, depending upon the size of the directory you are scanning, this may take awhile to run. Jody -----Original Message----- From: pauldotcom-bounces at mail.pauldotcom.com [mailto:pauldotcom-bounces at mail.pauldotcom.com] On Behalf Of infolookup at gmail.com Sent: Tuesday, June 02, 2009 6:13 PM To: PaulDotCom Security Weekly Mailing List Subject: [Pauldotcom] Folder and File Permission Hello All: I am looking for a way to scan all the files and folder on a set of Windows share to see who has read/write/deny permission. I tried using accessenum but since its so much individual files its kind of messy to go through. What are others using when the are giving a network and have to record who has what access? Sent from my Verizon Wireless BlackBerry _______________________________________________ Pauldotcom mailing list Pauldotcom at mail.pauldotcom.com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.339 / Virus Database: 270.12.51/2151 - Release Date: 06/02/09 17:53:00 _______________________________________________ Pauldotcom mailing list Pauldotcom at mail.pauldotcom.com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com_______________________________________________ Pauldotcom mailing list Pauldotcom at mail.pauldotcom.com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com_______________________________________________ Pauldotcom mailing list Pauldotcom at mail.pauldotcom.com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
-------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090603/12b39f50/attachment.htm
Current thread:
- Folder and File Permission infolookup at gmail.com (Jun 02)
- Folder and File Permission Raffi Jamgotchian (Jun 02)
- Folder and File Permission Jody & Jennifer McCluggage (Jun 02)
- Folder and File Permission Tim Mugherini (Jun 02)
- Folder and File Permission infolookup at gmail.com (Jun 03)
- Folder and File Permission Michael Dickey (Jun 03)
- Folder and File Permission ben smith (Jun 03)
- Folder and File Permission Neil van Paridon (Jun 03)
- Folder and File Permission Neil van Paridon (Jun 03)
- Folder and File Permission Tim Mugherini (Jun 02)