M
M
makrushertz2019-08-29 15:42:31
Active Directory
makrushertz, 2019-08-29 15:42:31

How to view the assignment of user rights to folders in AD?

AD is deployed at the enterprise, there are about 150 users, each has its own rights to folders, the management requires a report to whom what rights to each folder are given. Is there any way to see it at all?

Answer the question

In order to leave comments, you need to log in

4 answer(s)
R
Ronald McDonald, 2019-08-29
@Zoominger

Will he arrange it through Povershchel?
Get-Acl <путь>

A
Alexey Dmitriev, 2019-08-30
@SignFinder

Take the NTFSSecurity library - https://github.com/raandree/NTFSSecurity
With it, your task will be solved very simply.
There are examples here - https://blogs.technet.microsoft.com/fieldcoding/20...
If PoSH is fresh, then something like this:
Import-module NTFSSecurity.dll
Then form a list of directories via Get-ChildItem -Directory -Recurse
Then in ForEach pass this list to Get-NTFSAccess and export the output.

A
Andrey Semenov, 2019-08-29
@EraserKhv

From the Sysinternals package, the AccessEnum utility, export the result to txt, and parse it with Excel, for example. But it's better to run a recursive Powershell script, make a normal report.

M
makrushertz, 2019-08-30
@makrushertz

Thanks for the AccessEnum, but of course it is extremely redundant, because there is no option to view folders only. If you can lay out a working script on powershell, I will be grateful.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question