Exporting File and Folder permission

[Guest]

Hi,

I have a very special requirement. In my setup, there is Terrabyte of data
on file server. Users are directly added to these folders and files NTFS
permission. Now they want to add those users into groups and remove users.

For this, i need to export the ACL for users only. I have gone through many
tools, but they export users as well as groups also. How can I distinguish.
Folder hierarchy you can imange with TB of data. Its huge. Number of groups
and users also huge.

Need to write some scripts. Tried setacl, exported users and groups, then
according to SID format, tried to delete groups from exporte, but didnt work.

Any other idea pls...

 

[Roger Abell [MVP]]

It sounds to me like you need someone skilled at scripting or C#/VB.Net
(to recurse over structure, enumerate ACLs, distinguish users in SDs and
build dictionaries for each of points of use) and skilled with computer
science algorithms (for some of above and for detection of explicit vs
inherited so the per-user listing is only of the important appearances)

 

[Guest]

Thanks for inputs. I have all my scripting experts here. I can move ahead
once i get few hints. Like - How to distinguish between users and groups
using SIDs, or any other mechanism in NTFS Permissions. I have scripts ready
which can extract permission.