Auditor "Read Only" Access

[Guest]

Is it possible to give access to our Internal IT Auditor so that he can "view†shares, security permissions, global groups, group memberships, and allows him to look at the network independently without any ability to make changes.

If this is possible then is there any documentation available on this so that we can get the proper approval from the CIO of our company?

[cmccullough]

Re: Auditor "Read Only" Access

Your best solution for this scenario might be to try Exporter Pro. It is a read-only reporting tool.

[Guest]

Re: Auditor "Read Only" Access

Thanks, your response is helpful but I do have additional concerns. According to the Exporter Pro webpage our Auditor would then have the ability to do the following:

"Exporter Pro currently provides output of:
...
Files and directories"

The reason we are concerned is because the Auditor should never be able to actually open "files". This would be a violation of compliance regulations and also a conflict of interest. His job is only to audit IT but if he had the ability to "output files" then this is a huge breach.

Can you address these conerns at all?

Thanks again!

[cmccullough]

Re: Auditor "Read Only" Access

I'm not quite sure I understand this concern. Exporter Pro includes the ability for you to export information about files and directories, such as file size, creation/modification date, etc. It can't be used for copying or viewing files.

But, if they have permissions to actually view files and such in your environment, they would be able to do what you are suggesting with Windows Explorer or any number of free utilities.

[Guest]

Re: Auditor "Read Only" Access

My concerns were exactly what i had stated and I think you cleared up most of it.

We are fully aware of how users can access files via Explorer or other utilities. I was asking specifically about Explorer Pro because it says in the minimal documentation that I can find on the website that Explorer Pro can be used to "Output Files" It says that and it doesn't go into details on what that means. I had to imply that this meant they could output the content of files since there is nothing else saying differently.

Now you said that this means they can "export information about files and directories, such as file size, creation/modification date, etc. It can't be used for copying or viewing files." I have nothing else to go on other than what you tell me. Is there any documentation available on the website that can tell me more about what Explorer Pro can and cannot do? Please be aware that we have a fully licensed install of Hyena Enterprise Edition but, as far as I can tell, we have abandoned the use of it and are using other tools. If I can get proper documentation I may be able to justify the use of the Explorer Pro. I need to be able to show the CIO what the users can and cannot do with it.

Thanks very much!

[cmccullough]

Re: Auditor "Read Only" Access

The only other documentation for this would be Exporter Pro's help file. When you run Exporter Pro, go to the Help menu and choose Help Contents.