|
Posted by Roger Abell [MVP] on June 12, 2005, 11:08 pm
Please log in for more thread options If by where used you ask to find where it has been applied in
the ACLing to grant resource access on the filesystem then
there are tools you could use, like cacls with a post-process
to grep out for the specific groups, or like dumpsec, etc.
But there is no built-in place to make this inquiry directly,
meaning you need to have something walk over the permissions
of all resources and examine. This is why I advocate using a
group for the resource (or resource cluster) which has only the
well-defined and non-shifting use. Then, examining the resource
groups tells one exactly what principal groups have access and
where/to-what; and conversely, if this is the only way access is
granted to resources then examining the memberships of the
principal groups tell you the resources to which they have any
access.
--
Roger Abell
Microsoft MVP (Windows Server: Security)
"Jan K. van Dalen" <vandjATmarkross.com> wrote in message
> Hi Everyone,
>
> Is there any way I can know where a specific security group is being used?
>
> IOW, if it is used in 7 different directories, 9 files and 3 public
> folders that I would get a list with such info.
>
> Thanks.
>
| 
XML Sitemap