[ActiveDir] group membership script question

[Rich Milburn]

You know how sometimes you see these requests (or your help desk does) for: “Please give Jim Bob and Curly Sue access to \\server1\accounting, \\server3\cashcount, and \\server5\dontlookhere” and you think, “hmmm, now what group gives rights to those 3 servers because I’m not going to add Jim Bob or Curly Sue individual rights to those directories… Wouldn’t it be nice to have a script that says,   Enter list of shares to check Compare ACLs on shares Print list of groups with common rights on those shares   ?   Or maybe some variation on that.  In any event it’s a daily thing, having to go look at which groups to add a user to.  How do others resolve this issue?  Going to roles-based security is not easy without money for a third-party add-on.  Or is it?   Thanks Rich               -------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.