need utility to show user permissions

[Brian Miller]

I need a utility to show permissions on every directory/subdirectory and file within a tree.

anybody know of anything?

Thanks,
Brian Miller

[Drew Sweeney]

Brian,

On the Windows NT Resource kit there is a command line utility called SHOWACLS that will list the ACLs (Access Control Lists) for the contents of a current directory and optionally its subdirectories.

However the output is somewhat cryptic. Install the NT Res Kit, go to the installed directory and from the command prompt enter...

C:WinNT Res Kit> SHOWACLS /?

and it will show you the syntax and meanings for the cryptic response.

A snippet of the output follows.

Good luck,

drew

----------------------------------------------------------------------------

U:NT Resource kit (intel)>showacls /?

Usage:

showacls /s /u:domainuser filespec

/s include sub-directories
/u specify domainuser

ACE header values:

0x1 - Object Inherit ACE
0x2 - Container Inherit ACE
0x4 - No Propagate Inherit ACE
0x8 - Inherit Only ACE

Access mask values:

A Generic All l List Directory
R Generic Read d Read Data
W Generic Write S Synchronize
X Generic Execute r File Read
w File Write a File Append
fx File Execute D Delete
rE Read EA rW Write EA


U:NT Resource kit (intel)>SHOWACLS /s

ACL for directory [U:NT Resource kit (intel)]:

Ace SID Use Account Access
Hdr Name Mask

0x09 Group SID: BASUPPORTDomain Users 0xa0000000 RX
0x00 Group SID: BASUPPORTDomain Users 0x001200a9 dSrrEfx
0x0a Group SID: BASUPPORTDomain Users 0x001200a9 dSrrEfx
0x09 Group SID: BASUPPORTDomain Admins 0x10000000 A
0x00 Group SID: BASUPPORTDomain Admins 0x001f01ff DdSrwarEwEfx
0x0a Group SID: BASUPPORTDomain Admins 0x001f01ff DdSrwarEwEfx

ACL for [U:NT Resource kit (intel)EMWAC]:
Ace SID Use Account Access
Hdr Name Mask

0x09 Group SID: BASUPPORTDomain Users 0xa0000000 RX
0x00 Group SID: BASUPPORTDomain Users 0x001200a9 dSrrEfx
0x0a Group SID: BASUPPORTDomain Users 0x001200a9 dSrrEfx
0x09 Group SID: BASUPPORTDomain Admins 0x10000000 A
0x00 Group SID: BASUPPORTDomain Admins 0x001f01ff DdSrwarEwEfx
0x0a Group SID: BASUPPORTDomain Admins 0x001f01ff DdSrwarEwEfx

ACL for [U:NT Resource kit (intel)Kix95]:
Ace SID Use Account Access
Hdr Name Mask

0x09 Group SID: BASUPPORTDomain Users 0xa0000000 RX
0x00 Group SID: BASUPPORTDomain Users 0x001200a9 dSrrEfx
0x0a Group SID: BASUPPORTDomain Users 0x001200a9 dSrrEfx
0x09 Group SID: BASUPPORTDomain Admins 0x10000000 A
0x00 Group SID: BASUPPORTDomain Admins 0x001f01ff DdSrwarEwEfx
0x0a Group SID: BASUPPORTDomain Admins 0x001f01ff DdSrwarEwEfx

ACL for [U:NT Resource kit (intel)Kix95Win32]:
Ace SID Use Account Access
Hdr Name Mask

0x09 Group SID: BASUPPORTDomain Users 0xa0000000 RX
0x00 Group SID: BASUPPORTDomain Users 0x001200a9 dSrrEfx
0x0a Group SID: BASUPPORTDomain Users 0x001200a9 dSrrEfx
0x09 Group SID: BASUPPORTDomain Admins 0x10000000 A
0x00 Group SID: BASUPPORTDomain Admins 0x001f01ff DdSrwarEwEfx
0x0a Group SID: BASUPPORTDomain Admins 0x001f01ff DdSrwarEwEfx

[Jiju Thomas Philip]

Hi,
There is a shareware utility called DumpACL from Somarsoft. Its very useful to get all knds of permissions ( share and NTFS) and details about users, shared directories etc. U can download it from www.somarsoft.com

Regards
Jiju

------------
Brian Miller at 10/20/99 12:19:50 PM


I need a utility to show permissions on every directory/subdirectory and file within a tree.

anybody know of anything?

Thanks,
Brian Miller