How do I find a folder & its fullpath a group has rights on?

  • Thread starter Thread starter Simon
  • Start date Start date
S

Simon

Hi

I am currently trying to standardise the groups in Active Directory as
not all have been created correctly.

I have used LDIFDE tool to export the groups. One of my tasks is
adding a description to each group which indicates the fullpath to the
folder that the group is giving rights to.

My colleague says this cannot be done and I cannot find anything on
the ms support website or in google groups.

Currently I am searching the servers looking for the relevant OU's e.g
OU=Marketing, that the group is part of but this only gets you so far.

Does anyone know of any tool or command that can search for the
fullpath to a folder from the groupname(dn or sAMAccountName)??

Any help would be greatly appreciated otherwise it's going to be a
long hard slog!

Many Thanks
Simon
 
Interesting question.....

Rights to access a directory are part of the NTFS file system and are stored
on the hard drive of the server hosting the share, not in AD. You would have
to check every server/share on you network you are unterested in tracking
and get a list of the NTFS permissions.

We have tools that will dump the NTFS permissions of files/directories you
are interested in. (xcacls.exe, subinacls.exe) You could pipe this
information to a text file then build a list of who has what rights to the
directories from that information. I looked for a script that does this but
did not locate one.
 
Thanks Warren

Will use xcacls.exe to get the ntfs permissions and then cross match
them with the groups from AD to get the path to the folders.

Simon
 
Back
Top