How to list all NTFS and share permissions associated with a user or security group?

Question

We are doing some tidying up of Active Directory on our SBS 2003 domain controller.

A number of security groups exist which I am 95% sure are redundant. I want to be 100% sure they are not used anywhere before I delete them.

I would like to find a way to produce a comprehensive report listing all NTFS and share permissions associated with either a user or security group. Presumably I need a 3rd party program to do this?

Has anyone here done something like this before?

Any suggestions would be greatly appreciated.

You might want to try AccessEnum http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx — Dusan Bajic, Jul 14 '13 at 17:36
AccessEnum seems to have quite a basic interface- there could be better options out there. It could be quite difficult for me to use on our server with 720GB of data (mostly consisting of small documents). If no one else chimes in with any better answers then I'll accept this one next week :) — Austin ''Danger'' Powers, Jul 15 '13 at 09:52
you can check windows built-in icacls.exe, but I don't believe you will like that interface — Dusan Bajic, Jul 16 '13 at 20:37

score 1 · Answer 1 · answered Jul 15 '13 at 09:09

1

You might want to try AccessEnum

answered Jul 15 '13 at 09:09

Dusan Bajic

2,056
1
18
21

How to list all NTFS and share permissions associated with a user or security group?

1 Answers1