Icacls on Windows 2003 R2 SP2 also will export the permissions too:
http://technet.microsoft.com/en-us/library/cc753525(WS.10).aspx Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + [email protected] Phone:401-639-3505 ________________________________ From: Richard Stovall [mailto:[email protected]] Sent: Sunday, May 24, 2009 11:38 AM To: NT System Admin Issues Subject: RE: Exporting permissions Oops. I didn't notice that you need the filesystem permissions as well. Dumpsec will do this, but it might be a bit tedious getting the information for a lot of directories and sorting through it. Srvcheck will only do the shares. From: Richard Stovall [mailto:[email protected]] Sent: Sunday, May 24, 2009 11:33 AM To: NT System Admin Issues Subject: RE: Exporting permissions There was a thread here quite recently that addressed this. Two tools to do what you're looking for are: 1) Srvcheck.exe from the appropriate Windows resource kit 2) Dumpsec from http://www.somarsoft.com/ Dumpsec gives the option to export the report to csv which you can open directly in Excel. Good luck, RS From: helpdesk UK [mailto:[email protected]] Sent: Sunday, May 24, 2009 10:55 AM To: NT System Admin Issues Subject: Exporting permissions I have come across a domain I need to migrate from Win2k ==> Win2k3 but before we do that we have come across a big problem with the current file server. It has not been maintained properly and the permissions are randomly assigned all over the place..... & not documented either. Some places groups have been used some places users...etc...also within shares permissions have been shared out to random users and map drives manually to some shares...The customer is also not at all happy with the file structure and the Directors have been complaining about it since 1 year. So the File server has turned out to be a big problem for now & both parties feel this is the right time to invest in a few man days and get it sorted.... The domain is in such a mess that both parties have agreed it is not worth migrating and they are starting from scratch on the new domain i.e. Win2k3. The plan is to simply export the users and send them to HR for approval and once done we will import them to the new domain i.e. this will result in ensuring only valid users are created. They have 12 Administrator accounts currently out of which 5 users don't even work for them any more and the accounts are still enabled !!! But for File server what has been agreed is we need to export all the permissions [ Share + NTFS ] dump it to an excel file for each folder [ i.e. even if they are not shared ] within the file structure. Once this audit is complete we need to than present this information to the IT manager and restructure the data in correct shares with new set of drive letters and get this problem sorted using groups as opposed to individual users. So what I am looking for a script / tool of some kind which will dump this data to a excel file with information as follows.... user name / group name *** folder / file location *** permission assigned *** Any suggestions will be greatly appreciated. Thank you all all in advance for taking th Stu ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
