Script to view/report all security settings on a folder's files? 1

[dbMark]

I've just made major changes to the groups on my Windows Server 2003, some being added and some removed. Now I'm getting reports here and there of files with orphaned security rights. It seems some scattered files were given settings that did not apply to their locations in the folder hierarchy. Naturally, I'd like to find and fix those exceptions before they get reported one by one for the next few months or years. Is there an easy way to scan the security rights settings across multiple files to see which files are the exceptions?

Right now I have to right-click on each file, click on Properties, click the Security tab and select each group or user object to see each setting. Obviously, I can't do for a couple million times to find a few hundred exceptions.

Surely I'm not the first to wish for this so there must be a program or some VB script to scan a folder and subdirectories to report security rights settings that are not inherited or vary within a folder. Even a long list is far better than manually checking zillions of files.

dbMark

 

[EnochL]

I use DumpSec for this sort of thing..

http://somarsoft.com/

I think its free, also....always a plus!

 

[MojoZig]

DBMark,
Have you tried Hyena? You can return all security settings on selected share, folders and files. It's a great software, don't think I could do without it for system admin stuff ... You can even search Share Permissions and NTFS permissions for everything or you can filter just one user or group ...

Great for Event Logs on server and clients as well ...

Great for WMI reports on servers and clients ...

Great for lots of reasons ...

I use it mostly for reporting on stuff on the network.
Here at:

http://www.systemtools.com/hyena/index.html

Also:

http://www.javelinasoftware.com/

TT

 

[dbMark]

DumpSec is one of several freeware utilities at the same site as Hyena. Obviously it is quite limited by comparison. Thanks!