Answer the question
In order to leave comments, you need to log in
How to view the assignment of user rights to folders in AD?
AD is deployed at the enterprise, there are about 150 users, each has its own rights to folders, the management requires a report to whom what rights to each folder are given. Is there any way to see it at all?
Answer the question
In order to leave comments, you need to log in
Take the NTFSSecurity library - https://github.com/raandree/NTFSSecurity
With it, your task will be solved very simply.
There are examples here - https://blogs.technet.microsoft.com/fieldcoding/20...
If PoSH is fresh, then something like this:
Import-module NTFSSecurity.dll
Then form a list of directories via Get-ChildItem -Directory -Recurse
Then in ForEach pass this list to Get-NTFSAccess and export the output.
From the Sysinternals package, the AccessEnum utility, export the result to txt, and parse it with Excel, for example. But it's better to run a recursive Powershell script, make a normal report.
Thanks for the AccessEnum, but of course it is extremely redundant, because there is no option to view folders only. If you can lay out a working script on powershell, I will be grateful.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question