Security Basics mailing list archives

Re: enumerating folder permissions


From: Raoul Armfield <rarmfield () amnh org>
Date: Thu, 06 Jul 2006 09:23:16 -0400

Saqib Ali wrote:
you don't have to write a script. They are already available:

http://www.sysinternals.com/FileAndDiskUtilities.html (first 2 utils)

and on windows the "cacls" cmd try "cacls *" on your file server.

to get the list of users in group returned by the above mentioned
utils, you just have to query the AD using LDAP. very easy using a VB
script.



Thanks for the input. I will try those. I am aware of cacls however, what I am looking for is the following.

User A requests that access to folder Z be restricted to Users A,B,C. six months later User A wants to remember who else has access to folder Z. User A simply runs the script or software where he selects Folder A and a message box or something pops up that lists the groups and their members.

Hopefully the software from systernals will let me do this.

Raoul


--
Raoul Armfield
Support Specialist
IT-Call Center
rarmfield at amnh dot org
American Museum of Natural History
Central Park West at 79th Street
New York, New York 10024-5192
(212) 313-7258

7E01 141D 9D9B 40E9 4969
9644 00EB 6D79 03C2 B6AD

---------------------------------------------------------------------------
This list is sponsored by: SensePost

Hacking, like any art, will take years of dedicated study and practice to master. We can't teach you to hack. But we can teach you what we've learned so far. Our courses are honest, real, technical and practical. SensePost willl be at Black Hat Vegas in July. To see what we're about, visit us at:
http://www.sensepost.com/training.html
---------------------------------------------------------------------------


Current thread: