|
Posted by HDI on June 22, 2006, 4:19 am
Please log in for more thread options
Hi,
Is there a tool to view the effective permissions for a user or group
like in advanced security settings?
Xcacls?
Thx
|
|
Posted by Steven L Umbach on June 22, 2006, 12:27 pm
Please log in for more thread options
Not that I know of. Xcacls.vbs does a pretty good job of displaying
permissions however. It is important to manage users and groups carefully to
be able to track permissions. There are tools that can help enumerate a
users group membership for a domain such as dsget and dsquery. There are
also some limitations of the GUI effective permissions as shown in the link
below. --- Steve
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/acl_effective_perm.mspx?mfr=true
The calculation does not take these Security Identifiers into account: the
Anonymous Logon, Authenticated Users, Batch, Creator Group, Creator Owner,
Dialup, Enterprise Domain Controllers, Interactive, Network, Proxy,
Restricted, Self, Service, System, and Terminal Server User. An example
would be if a user were to access a file remotely.
> Hi,
>
> Is there a tool to view the effective permissions for a user or group
> like in advanced security settings?
>
> Xcacls?
>
> Thx
>
|
|
Posted by Peter on June 24, 2006, 4:54 am
Please log in for more thread options > Hi,
>
> Is there a tool to view the effective permissions for a user or group
> like in advanced security settings?
>
> Xcacls?
>
> Thx
>
You can have a look at the tool Permission Analyzer. The tool enumerates all
the access rights for a particular user or user group. It will also check
the permissions of all related/nested groups of the selected user or user
group.
http://www.permissionanalyzer.com
|
|
Posted by HDI on June 27, 2006, 2:18 pm
Please log in for more thread options Thats what I need but it has to be free.
|
|
Posted by Peter on June 27, 2006, 5:20 pm
Please log in for more thread options > Thats what I need but it has to be free.
>
There are no graphical free tools. But you can have a look at the tool
DumpSec. It is free, but dumps the list of information in one big list and
it does not included the access rights of nested groups, for as far as I
know.
But you can give it a try: http://www.somarsoft.com
|
| Similar Threads | Posted | | how to get effective permissions? | January 9, 2006, 1:37 am |
| effective user rights | January 5, 2006, 5:50 pm |
| Effective permission - folders | April 18, 2006, 7:54 pm |
| Local Security Policy "Effective Settings" | September 1, 2006, 7:24 pm |
| Pulling out users different EFFECTIVE access rights to folders? | June 29, 2005, 5:15 am |
| Security event view | April 20, 2006, 1:04 pm |
| Where to View Machine Certificate? | November 1, 2006, 2:25 am |
| Not able to view secondary hard drive | January 11, 2006, 9:53 am |
| Permission to View Event Viewer | June 6, 2008, 9:11 am |
| Allow non-Administrator to view and terminate processes for all users | July 21, 2006, 5:56 pm |
|
XML Sitemap