Utility to display folder permissions

Utility to display folder permissions

Postby John Gray » 25 Jan 2011, 06:07

I can't find any reference to this by Googling, but I'm hoping someone knows of a utility that could display the permissions to all the folders on the C: drive. All I can find so far is ICACLS (in \Windows\System32), whose function seems to be purely to modify permissions, not display them! Thanks!
John Gray

MilliHelen: that quantity of facial beauty sufficient to launch a single ship
Post=40666
User avatar
John Gray
SilverLounger
 
Posts: 2359
Joined: 24 Jan 2010, 08:33
Location: A cathedral city in England

Re: Utility to display folder permissions

Postby Argus » 25 Jan 2011, 07:42

A quick search gives some different results. Some have used Powershell, it seemed; when doing other things. But one could use something like this: http://technet.microsoft.com/en-us/libr ... 76838.aspx

Found one quite expensive tool (keywords: folder permissions reporting, and guess what, there is a tool with that name): Folder Permissions Reporting (For NTFS) that seems to be very capable of generating different reports. However, have never heard of the company (but that doesn’t say much), so know nothing about it.

Then there was SomarSoft's DumpSec as freeware, but that one is for NT/XP/200x and I don't know how that it will work.

But if I have understood your question correctly, AccessEnum, by Bryce Cogswell (Windows Sysinternals) could perhaps be the best alternative. Have tried it a bit; small and simple, can save to .TXT, and compare.
There's no built-in way to quickly view user accesses to a tree of directories or keys. AccessEnum gives you a full view of your file system and Registry security settings in seconds, making it the ideal tool for helping you for security holes and lock down permissions where necessary.

And finally an old tip at WindowsITPro: http://www.windowsitpro.com/article/tip ... ders-.aspx
Post=40669
User avatar
Argus
BronzeLounger
 
Posts: 1390
Joined: 24 Jan 2010, 19:07
Location: Sweden

Re: Utility to display folder permissions

Postby John Gray » 25 Jan 2011, 08:24

Thank you, Sir! Yes, the price of the "Folder Permissions Reporting" tool is in the Apple league. DumpSec hasn't been touched since 1998, so is unlikely to know much about Windows 7/NTFS 5. AccessEnum looks promising, and I'll have a try with it when I get home. CACLS "is deprecated - please use ICACLS".

On trying ICACLS folderpath (not an option in the help information!) it appears to list the permissions I want - so it was there all the time... Grrrrh.
Here's an example:

Code: Select all
d:\bat BUILTIN\Administrators:(F)
       BUILTIN\Administrators:(I)(OI)(CI)(F)
       NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
       CREATOR OWNER:(I)(OI)(CI)(IO)(F)
       BUILTIN\Users:(I)(OI)(CI)(RX)
       BUILTIN\Users:(I)(CI)(AD)
       BUILTIN\Users:(I)(CI)(WD)

Successfully processed 1 files; Failed processing 0 files
John Gray

MilliHelen: that quantity of facial beauty sufficient to launch a single ship
Post=40671
User avatar
John Gray
SilverLounger
 
Posts: 2359
Joined: 24 Jan 2010, 08:33
Location: A cathedral city in England

Re: Utility to display folder permissions

Postby Argus » 25 Jan 2011, 08:50

You're welcome. Mmm, I do like the tools from Windows Sysinternals, as I know you and many other Loungers do.

As for looking for help in help files:
Searchers' Laws
1. You can always find what you're not looking for.
2. If a lost thing is found, something else will disappear.
3. If you file it, you'll know where it is but never need it. If you don't file it, you'll need it but never know where it is.
4. The first place to look for anything is the last place you would expect to find it.
5. You will always find what you have lost in the last place you look for it.
Post=40677
User avatar
Argus
BronzeLounger
 
Posts: 1390
Joined: 24 Jan 2010, 19:07
Location: Sweden

Re: Utility to display folder permissions

Postby John Gray » 25 Jan 2011, 18:41

Also...
The major difference between a thing that might go wrong and a thing that cannot possibly go wrong is that when a thing that cannot possibly go wrong goes wrong it usually turns out to be impossible to get at or repair.
John Gray

MilliHelen: that quantity of facial beauty sufficient to launch a single ship
Post=40744
User avatar
John Gray
SilverLounger
 
Posts: 2359
Joined: 24 Jan 2010, 08:33
Location: A cathedral city in England


Return to Windows 7

Who is online

Users browsing this forum: CCBot [Bot] and 0 guests