Tool for displaying inherited ACLs?

[Guest]

Is there a good tool for displaying ACL inheritance down the file structure?
I don't just want to see what folders have different permissions; I'd like to
be able to tell what's being inherited and what isn't.

For instance, I've looked at Somarsoft's dumpacl, Nextlog's logacl, and
Sysinternal's accessenum. None of them give a clear picture of what folders
inherit and what have explicit permissions.

Our file structure isn't so complex or dynamic that I can't maintain it by
hand, but it's deep enough I don't want to have to explore it manually. Any
suggestions for an inheritance-aware reporting tool?

 

[Brad Dinerman [MVP - Windows Server Networking]]

Try ScriptLogic's Security Explorer? It may do what you want. They
have an eval version if you want to play with it.

http://www.scriptlogic.com/products/securityexplorer/

Yours,
Brad Dinerman




______________________________________
Bradley J. Dinerman, MVP - Windows Server Systems
President, New England Information Security Group
http://www.neisg.org

 

[Steven L Umbach]

Take a look at fileacl and calls.vs. . I know that fileacl will show a flag
for inherited permissions but not sure about xcacls.vbs. --- Steve

http://www.gbordier.com/gbtools/fileacl.htm --- fileacl
http://support.microsoft.com/?id=825751 -- xcacls.vbs

 

[Guest]

Now I've struggled through the help message, it looks like fileacl will do
pretty much everything I need, especially with the /noinherited flag. Thanks!

 

[Steven L Umbach]

Glad it is helpful . It has become my favorite command line tool for
viewing, managing, and exporting permissions. --- Steve