F
flaufs
We have situation where over 400 groups contain up to 100
members each.
Users have, in the past, been able to set their own
permissions and although they are supposed to document
what has been changed, this hasn't been done, and control
has been somewhat lost.
We have taken back control of setting permissions so the
situation will not get any worse. Now we want to get back
to a situation where who has permission to what is
documented correctly. Obviously we can look up an
individual user or group and check the information
visually, but what we really need to do is to export all
information - which members are in which groups - and then
compare it to the documentation we have, which tells us
what the situation is supposed to be. Then we can compare
one set of information to the other and find out who's got
permission to what that they shouldn't have.
I have considered ldfide and csvde and xcacls. Which of
these if any offer the best solution? Have you any
comments or suggestion? (Please leave out the one about
how we shouldn't have got into this mess in the first
place!)
Kind regards.
members each.
Users have, in the past, been able to set their own
permissions and although they are supposed to document
what has been changed, this hasn't been done, and control
has been somewhat lost.
We have taken back control of setting permissions so the
situation will not get any worse. Now we want to get back
to a situation where who has permission to what is
documented correctly. Obviously we can look up an
individual user or group and check the information
visually, but what we really need to do is to export all
information - which members are in which groups - and then
compare it to the documentation we have, which tells us
what the situation is supposed to be. Then we can compare
one set of information to the other and find out who's got
permission to what that they shouldn't have.
I have considered ldfide and csvde and xcacls. Which of
these if any offer the best solution? Have you any
comments or suggestion? (Please leave out the one about
how we shouldn't have got into this mess in the first
place!)
Kind regards.