security group access to what shares? Can one find out?

  • Thread starter Thread starter Eddie Smit
  • Start date Start date
E

Eddie Smit

Is it possible to retrieve the shares on a network that a security group has
access to?
In other words:
We can list the group(s) a user is in, and now we want to list the
shares where this group(s) have access to.
Purpose: We want to display a list with all shares a user has access
to.

Thanks in advance,
Eddie Smit. Holland.
 
Is it possible to retrieve the shares on a network that a security group has
access to?
In other words:
We can list the group(s) a user is in, and now we want to list the
shares where this group(s) have access to.
Purpose: We want to display a list with all shares a user has access
to.

Thanks in advance,
Eddie Smit. Holland.
Click to expand...

Using rmtshare from tip 5363 in the 'Tips & Tricks' at http://www.jsiinc.com,
you can parse the list of shares on each 'server' and then parse their
permissions against the list of groups.



Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Hi Jerold (or another interested person),

Thanks for your fast reply. This rmtshare tool works fine. But we are
a large company, which has multiple area locations with a total of 80
Windows2000 servers. The different locations are configured
differently from each other due to a historic merger. Practically we
have two types of share creation and permission setting methods.

A. assigning security groups on share level (rmtshare works fine)
B. assigning security groups on file level (HP SAN, rmtshare works,
but will not list the groups that have access to this share)

What we theoretically want:
1. Because of the large amount of servers and shares, users are
sometimes looking for their shares and browsing around the network a
lot. We want to make an intranet portal that uses ASP and the Server
Variables to authenticate the user.
2. Then we use ADSI (Active Directory) to lookup the security groups
the user belongs to.
3. But the last point, finding the shares, including server name and
path, that belongs to those security groups is the problem in our
B-part of the network.
4. The last action will be to list the shares as hyperlinks where the
users can click on within Internet Explorer to jump towards the
appropriate share on the appropriate server.

Is there any solution to our problem?

Thank in advance,

Eddie Smit (Holland)
 
Back
Top