Windows File Share permissions

[Gixxer]

In a windows 2000 domain, does anyone know how to compose a report that will list a file share and file permissions assosiated to that share. Take it a step further and list all folders beneath that share and what permissions are assosiated with those folders as well. We are having an audit soon and need to produce a report of this sort.

Is there some third party software that will do this?
manually? (

thank you

[MURACU]

I would use a tool like HYENA to do that you can list all the security permissions and export them into a msaccess database. That should do the job for your audits. You can download a trail version of hyena from the web which will allow you to see if it suits your needs. There are a good couple of other tools that allow the same thing but that is the first that springs to mind.

edit : added a link to hyenas home site.

[catch]

I like Super CALCS from Trusted Systems Services Inc at:
http://www.trustedsystems.com/scacls.htm

If you need further functionality their Advanced Checker scripting language is VERY powerful.
http://www.trustedsystems.com/advanced_checker.htm

Trusted Systems Services is pretty much the top Windows security organization out there, they were after all charged with writing the NT B2 Feasability study and they wrote the NSA security Win2k guidelines. Other tools will do similar things, just depends on the level of assurance you need and how much of the audit you'd like to automate, and how few questions you'd like to be asked about your methodology.

cheers,

catch

[SirDice]

DumpSec from SomarSoft would be my choice. It's free

[Irongeek]

Share enum is worth looking at, and it's free:

http://www.sysinternals.com/ntw2k/so...hareenum.shtml

If you just want to know if it's read/write for the current user Softperfects NetScan is usefull for finding rouge file shares:

http://www.softperfect.com/products/networkscanner/