-
May 11th, 2005, 06:35 PM
#1
Member
Windows File Share permissions
In a windows 2000 domain, does anyone know how to compose a report that will list a file share and file permissions assosiated to that share. Take it a step further and list all folders beneath that share and what permissions are assosiated with those folders as well. We are having an audit soon and need to produce a report of this sort.
Is there some third party software that will do this?
manually? (
thank you
-
May 11th, 2005, 07:13 PM
#2
I would use a tool like HYENA to do that you can list all the security permissions and export them into a msaccess database. That should do the job for your audits. You can download a trail version of hyena from the web which will allow you to see if it suits your needs. There are a good couple of other tools that allow the same thing but that is the first that springs to mind.
edit : added a link to hyenas home site.
\"America is the only country that went from barbarism to decadence without civilization in between.\"
\"The reason we are so pleased to find other people\'s secrets is that it distracts public attention from our own.\"
Oscar Wilde(1854-1900)
-
May 11th, 2005, 08:28 PM
#3
I like Super CALCS from Trusted Systems Services Inc at:
http://www.trustedsystems.com/scacls.htm
If you need further functionality their Advanced Checker scripting language is VERY powerful.
http://www.trustedsystems.com/advanced_checker.htm
Trusted Systems Services is pretty much the top Windows security organization out there, they were after all charged with writing the NT B2 Feasability study and they wrote the NSA security Win2k guidelines. Other tools will do similar things, just depends on the level of assurance you need and how much of the audit you'd like to automate, and how few questions you'd like to be asked about your methodology.
cheers,
catch
-
May 12th, 2005, 09:21 AM
#4
DumpSec from SomarSoft would be my choice. It's free
Oliver's Law:
Experience is something you don't get until just after you need it.
-
May 12th, 2005, 04:35 PM
#5
Share enum is worth looking at, and it's free:
http://www.sysinternals.com/ntw2k/so...hareenum.shtml
If you just want to know if it's read/write for the current user Softperfects NetScan is usefull for finding rouge file shares:
http://www.softperfect.com/products/networkscanner/
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|