How to list shares to which a user has access

[John French]

My boss has requested that we be able to provide a list of shares on servers
in our domain to which a given domain user has access. For example, if he
wants a list of shares for Domain\SomeUser then I need to be able to say
that SomeUser has access to SomeUser$ on Server1, SharedFolderX on Server2
and so on. Is there any way to generate this type of report?

 

[Steven L Umbach]

Generally users should not be assigned permissions to shares but added to
groups that in turn have permissions to shares and therefore it is a matter
of showing which groups have permissions to a share and then listing what
groups a member belongs to. I don't know of any easy magic way, but you may
look into third party tools such as dumpsec from Somar [free] ShareEnum form
Sysinternals [free] and maybe something like LanGuard which can scan your
network for security weaknesses [free to try]. --- Steve

http://www.somarsoft.com/
http://www.sysinternals.com/ntw2k/source/shareenum.shtml
http://www.gfi.com/languard/

 

[John French]

Thanks a million. ShareEnum works very well. It identified 821 shares on
our 7 site network. We did an import into excel and can filter it in any
number of ways. Already closing security holes, everyone is happy.

Generally users should not be assigned permissions to shares but added to
groups that in turn have permissions to shares and therefore it is a matter
of showing which groups have permissions to a share and then listing what
groups a member belongs to. I don't know of any easy magic way, but you may
look into third party tools such as dumpsec from Somar [free] ShareEnum form
Sysinternals [free] and maybe something like LanGuard which can scan your
network for security weaknesses [free to try]. --- Steve

http://www.somarsoft.com/
http://www.sysinternals.com/ntw2k/source/shareenum.shtml
http://www.gfi.com/languard/

My boss has requested that we be able to provide a list of shares on servers
in our domain to which a given domain user has access. For example, if he
wants a list of shares for Domain\SomeUser then I need to be able to say
that SomeUser has access to SomeUser$ on Server1, SharedFolderX on Server2
and so on. Is there any way to generate this type of report?

 

[cook]

My boss has requested that we be able to provide a list of shares on servers
in our domain to which a given domain user has access. For example, if he
wants a list of shares for Domain\SomeUser then I need to be able to say
that SomeUser has access to SomeUser$ on Server1, SharedFolderX on Server2
and so on. Is there any way to generate this type of report?

You can also try NetBiosSpy : http://www.netbiosspy.4t.com