ACL on server

amyamandaallen · June 2006

Hi,

Is there anyway on a 2003 server that you can export access control lists for something like a folder or a security group to a text or database file?

Hope that makes sense.

Many thanks.

sprkymrk · June 2006

W2K3 Resource Kit tool Showacls.exe:
==========================
Show ACLs (ShowACLs) is a command-line tool that enumerates access rights for files, folders, and trees. It allows masking so that you can enumerate only specific access control lists (ACLs). ShowACLs works on NTFS file system partitions only.

ShowACLs also allows you to view permissions for a particular user. ShowACLs does this by enumerating the local and global groups to which the particular user belongs, and matching the user's security identifier (SID)—and the SIDs of the groups to which the user belongs—to the SIDs in each access control entry (ACE).
===========================
An example would be:
showacls.exe /s c:\temp >> aclfile.txt

This would write the acl's from c:\temp, including subdirectories, to the file aclfile.txt.

amyamandaallen · June 2006

Im at a dos prompt now and it does like showacls, its it an additional resource from somewhere or 3rd party?

Many thanks

amyamandaallen · June 2006

sorry goalposts have been changed on me.

What I need to get is who would be including in a exchange security or distribution group eg what users.

Sorry to be a pain!

Thanks.

sprkymrk · June 2006

sprkymrk wrote:

W2K3 Resource Kit tool Showacls.exe:

Resourse Kit.

http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

sprkymrk · June 2006

amyamandaallen wrote:

sorry goalposts have been changed on me.

What I need to get is who would be including in a exchange security or distribution group eg what users.

Sorry to be a pain!

Thanks.

ifmember.exe
Same link as above.
Hope that helps.

ACL on server

Comments