View permissions for groups

[Guest]

Hello - How do I view the permissions that a specific group has on our network? I know how to go to each share and view NTFS file/ and share permissions. But I would like to do this by groups rather than shares. We are in the process of cleaning out all unnecessary groups.

Thank you in advanced for your help.

[cmccullough]

Re: View permissions for groups

The Exporter Pro utility included with Hyena under Tools->Exporter Pro can do this for you. It has an NTFS report which allows you to specify a group that you want it to search for. Keep in mind that this can run for a long time if you have many servers with many files on them. Each file ACL has to be looked at to see if the group is there.

Here are some instructions if you want to test this:

In Hyena select the server or servers that you want to report on, then go to Tools->Exporter Pro->Export Selected Objects.
Click the Settings button, then double-click on Security Access.
Check the box to Export Security Information and enter an Output File Name.

For share permissions, check the box for shares and choose the type of shares you want reported on. For NTFS file and directory permissions check the box for Files and Directories.

Check the box to only export information for users/groups listed in this file. Enter a filename that will contain the users/groups you want to search for. The file doesn't have to exist yet because when you click the Edit button Notepad will open and ask you if you want to create it. In the file you will list, one per line, the users and/or groups you want to search for. Then click OK to close that dialog.

You'll also need a File/Directory template, so double-click on File/Directory. Click the New button at the bottom, give it a Template Name and an Output File Name. If you only want to search directories, check the box for that, then click the Add button beside Shared Directory Paths. Choose the shares you want, how far down you want it to scan, then click OK.

Security Access and File/Directory should be the only options enabled on this screen, if there is anything else enabled, disable them. When done, click Close and click Start Export.

When finished you can open the output file specified on the Security Access tab with Excel and see if that is what you are looking for.

[Guest]

Re: View permissions for groups

Thank you for your response. I will give this a try. But is there a way that I could just select a group instead of a server and then have Exporter run the security attributes for a particular group?

[cmccullough]

Re: View permissions for groups

Unfortunately there isn't because Windows doesn't centrally store this data. It is kept with the ACL for files, directories, shares, etc. Applications have to view each ACL individually to see what security has been applied.