New user needs help

[Guest]

I am a brand new Hyena user and I need to get a report that shows our domain admins and their access. How do I do this?

[kstanush]

Re: New user needs help

I need a bit more information. Are these domain admins part of a Windows NT or Windows 2000 domain, and what do you mean by 'access' ? Do you mean access to files, directories, shares, or what groups they belong to ?

[Guest]

Re: New user needs help

We still have both platforms. The auditors requested a report of our domain admins "and their access" By this I assume they mean everything. Is there a way to get this is a report format?

[kstanush]

Re: New user needs help

Without knowing exactly what they want, this is a bit hard. Windows does not store a central database or repository of all user access permissions, so this is one of the biggest challenges in Windows management.

Start with the shares. Assuming that you don't have a ton of servers, or servers with data that is of interest, expand the domain object in Hyena's left window, then expand the Servers object. If you don't find the servers under there, look under the Computers object.

Expand a given server, right click on Shares, and select "View All Access Rights". Then select Edit->Select All, then Edit->Copy. Copy the data to the clipboard, then open Excel and Edit->Paste.

Repeat this process for each server (that why I was hoping that you did not have a lot of servers).

If your organization does not use share-level security, but rather sets security at the file/directory level, then things get a bit more complicated. Let me know if you want to go there.

[Guest]

Re: New user needs help

Thanks
We have 122 severs on site plus our remote ones so this appears to be a huge job. I guess I was hoping this could be generated automatically. I've been told that Bindview could produce such a report, but we no longer use that product. Thanks for the input. Guess I better get started!

[kstanush]

Re: New user needs help

If you just need share security information, we have a free utility (Exporter) that can export shares and their security. If you want to try that route, let me know.

Our new exporting tool (Exporter Pro) will offer this feature in its next release. Getting the security on a large set of shares, etc. is best suited for tools that are not GUI/interactive, as it can take quite a bit of time.

Small Wonders (www.smallwonders.com) offers tools that specifically do security-related reporting and such. Sine there are companies out there that offer products just for this, you can imagine how difficult it is to deal with.

[Guest]

Re: New user needs help

Ok, we do have exporter. How can I utilize that to get this done?

[kstanush]

Re: New user needs help

Make sure that the .exe is just named exporter.exe. If so, there should be a help file that goes with it. To use it just by itself, you have to configure the domain name setting in the .INI file (usually named Export.INI) and set the Export Shares to =1, plus the other settings for shares (output file and to export security).

If you have questions, I'll check my email from time-to-time.