Re: Windows 2000 permissions reporting




"Mal" <Mal@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DAFC4AA7-8F23-4289-9942-9CE4D7193FFE@xxxxxxxxxxxxxxxx
I am looking to find a tool that will document Windows 2000 permissions for
me. The tools I have tried so far seem to all report on every folder, not
just the folders where the permissions were applied, because obviously the
permissions flow down the file structure.

Technically any subdirectory or individual files MAY have different
permissions.

Unfortunately, unlike Novell where trustee are set on a particular folder
and then get inherited by sub folders without the trustees being applied
at
each level, Windows seems to stamp every folder but I only want to know
about
the folders where the permissions are actually applied.

Permission are actually inherited when the child object is created. The
permission
in both a very real and design sense are on the individual objects.

Inheritance is largely just a convenience for APPLYING those permissions.

Can anyone help?

You can certainly document them with something like SetAcl.exe (free) from
SourceForge.net.

SetAcl will not offer you a highly readable form, but it can be used to
script
the settings back into the system if they are ever changed or damaged.

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)


.



Relevant Pages

  • Re: Authenticated users permissions
    ... After that some files / folders did not have the permissions. ... Authenticated Users permission and select it to be Read Only (not denying ... > will turn them into the initial explicit permissions on the new inheritance ...
    (microsoft.public.security)
  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)
  • RE: ISA 2004 REPORT FAILURE
    ... Did as you suggested and turned auditing on for the system and folders ... that is setting the wrong permissions of the folders ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: File permissions
    ... minutes to take ownership and set attributes of all files in this folder. ... folders since that is what is causing the root problem. ... strip the block inheritance setting if ... and then let the inheritable permissions trickle in. ...
    (microsoft.public.windows.server.active_directory)
  • RE: ISA 2004 REPORT FAILURE
    ... the ISA Reports still fail because ... I can change the permissions manually ... on the ISALogs and ISASummaries folders ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)