Group permissions

[Jeremy]

I have several global groups that I would like to find out
what folders on my network they have permissions to. I
don't want to go to each folder and see if they permission
or not. I want something automated. I am aware of the
xcacls.exe utility, but I would have to run that on every
folder. Any info or suggestions would be helpful. Thanks.

 

[Herb Martin]

I have several global groups that I would like to find out

what folders on my network they have permissions to. I
don't want to go to each folder and see if they permission
or not. I want something automated. I am aware of the
xcacls.exe utility, but I would have to run that on every
folder. Any info or suggestions would be helpful. Thanks.

Well, yes, you will have to run it on every directory to be
certain -- xcacls uses /T for doing subdirectories so it is
easy to automate (and send the output to a file for searching.)

You can also use the PERMS command from the Resource
Kit to check each group SPECIFICALLY -- permsl.exe
uses the more normal /s for subdirectories.

 

[Herb Martin]

for /r C:\ %a in (*) do (cacls "%a") | (find /i "USERNAME" && echo %a)

Here's the problem with the find solution:

When there is more than one ACE on a file or directory, the
User or Group name for all but the first will appear inset on
the following line(s).

It's an irritating issue with Cacls and Xcacls.

It does work if each file only has ONE ACE set in the ACL.