For our audit we have to list ALL the users who have permissions on
each share,
OK, I kind of understand.
The long way round is to
manually go to each share and list the users and their respective
permissions, however we up to 90 shares on some servers, serving 500+
people... it's a bit daunting!
Sure, but you must know what they are??
Are you saying you have guys with Admin rights going round 90 shares
putting random permissions on them (??) with no guidance from the boss
of the network? Even if they did do this, WHY did they do this?
I was hoping this could be done easier with some interrogation using
WMI.
I think what you're asking is "it possible to get a list of the ACLs on
each share using WMI".
Re: removing user from domain users group doesnt help ... What I would do is to give that global group deny access this computer from ... only access shares on that server.... give that group deny permissions for other shares on that server. ... (microsoft.public.windows.server.security)
Re: removing user from domain users group doesnt help ...user permissions to any shares and instead give permissions to the global groups you want to have access or give the global group deny permissions to the shares you don't want them to access or deny access this computer from the network user right for computers you don't want them to access shares on which can easily be managed via Group Policy. ... I have few shared folders on my w2k3 file server and most of them allow read access for the domain users group.... (microsoft.public.windows.server.security)
Re: removing user from domain users group doesnt help ...user permissions to any shares and instead give permissions to the global ... the shares you don't want them to access or deny access this computer from ... to the shares and do not include users/domain... I have few shared folders on my w2k3 file server and most of them allow ... (microsoft.public.windows.server.security)
Re: cant get access to disk share when connecting from a remote s ... > When I am connecting to the shares created by the script I always connect ... > with the admin username and password of the system that the shares are on; ...NTFS permissions on the files and folders themselves. ... (microsoft.public.windows.server.scripting)
Re: VBScript to audit shares and share permissions ... You can also use SRVCHECK tool included in Windows Server Resources Kit.... A simple script will allow you to scan all your network. ... see all shares.... VBScript to audit shares and share permissions... (Focus-Microsoft)
