Script (s) to help with file security audit

Hi folks,

I think this is the right newsgroup, if not I apologize upfront.

I need to do a few things as part of our file security audit (we will be
doing this regularly going forward so I am hoping to automate at least part
of it).

This is what I need to do:
1 - Get a list of all files and folders in a specific location (I can access
remotely or locally so whichever is the easiest way). Ideally I would like
to return the path and file name as separate items rather than one long
string.
2 - Get a list of all local and domain users and groups which have access to
each file and folder along with the level of access each has.
3 - Flag any objects where the permissions are different from it's parent
object.
4 - Get a list of all domain users along with their AD location.
5 - Get a list of all domain groups including group membership and AD
location.

I would also like to be able to have the information returned in some kind
of delimited format so we can work with the data in Excel.

I realize that they can't all be combined but I am hoping it will be
possible to do the first three items together then do the last two together.

I have looked around and found what appears to be a million different ways
to do this and I am not sure where to start.

I do have some limited experience with scripting and have already scripted
some of our more time consuming tasks but I feel like I'm going cross-eyed
when I look at the examples that are available.

Can some provide some tips on where I can start looking for information or
perhaps even some script examples?

Thanks,
Nancy
.

Relevant Pages

  • Re: Full access without Administrative rights
    ... Administrators group to let all domain users automatically be local ... avoid the issue with cross network admin rights ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windows.group_policy)
  • Re: Full access without Administrative rights
    ... Administrators group to let all domain users automatically be local ... avoid the issue with cross network admin rights ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.security)
  • Re: distinguish between local or domain account?
    ... > (both local and domain accounts), but I'm trying to figure out how to ... > determine whether they are local or domain users. ... > I tried adding a '.domain' to the objGroup but it is not recognized. ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.wmi)
  • Re: Remove Users From Local Admin Group
    ... > local Admin group from the login script. ... Both local and domain users will be removed ... ' account from the Administrators group will fail. ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.scripting.vbscript)