nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

enumerating users and groups on folders

zenlakin

I am going to try to explain this as efficiently as possible. I am wanting to be able to audit folders on a windows share and would like to see if there is a way from command line that I could run a script or something along those lines to enumerate which groups have access to which folders. At that point I would also like to take it a step further and enumerate what users are in the groups as well and have it all output to a text file or something so that I could ultimately copy the information into a spreadsheet. That make any sense?

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

dynamik

Check out icacls, cacls, or setacl.

icacls is an updated version of cacls, but I'm not sure if it's specific to Vista/2008 or if it works with older OSes.

blargoe

Check out AccessEnum, you'll find it on the Microsoft SysInternals site

http://www.sysinternals.com

HeroPsycho

You need a little PowerShell goodness...

get-acl <path> | select-object path,owner,accesstostring,group | export-csv c:\ACL.csv

get-group can be used to get all members of a group, or you can always use dsget for that.

Enjoy!

zenlakin

Looks like I am not able to run that get-acl or get group command.

hypnotoad

zenlakin wrote:

Looks like I am not able to run that get-acl or get group command.

Probably have to install powershell.

http://www.microsoft.com/windowsserver2003/technologies/management/powershell/default.mspx