ACL on server

amyamandaallen

Hi,

Is there anyway on a 2003 server that you can export access control lists for something like a folder or a security group to a text or database file?

Hope that makes sense.

Many thanks.

sprkymrk

W2K3 Resource Kit tool Showacls.exe:
==========================
Show ACLs (ShowACLs) is a command-line tool that enumerates access rights for files, folders, and trees. It allows masking so that you can enumerate only specific access control lists (ACLs). ShowACLs works on NTFS file system partitions only.

ShowACLs also allows you to view permissions for a particular user. ShowACLs does this by enumerating the local and global groups to which the particular user belongs, and matching the user's security identifier (SID)—and the SIDs of the groups to which the user belongs—to the SIDs in each access control entry (ACE).
===========================
An example would be:
showacls.exe /s c:\temp >> aclfile.txt

This would write the acl's from c:\temp, including subdirectories, to the file aclfile.txt.