looking for script / tool

[lingk]

Hey everyone

I'm looking for some help on a script that will scan a networkshare and tell me what AD users have access to that folder and subfolders and what there access is.

I have googled around and can seem to only find scripts that tell me what the share permissions are but not the security and will list what AD users have access to the folder and there rights.

or if you know a tool that can do this, that would be nice too.

thanks a lot!

[nmX.Memnoch]

Check out SubInACL. For that matter you can do it with XCACLS with a little scripting. ICACLS (found in Server 2003 as well) has built in functions for it as well.

[allen2]

I use dumpsec (from systemtools) to get the security rights. Then i'll dump the groups content with dsget or net group or net localgroup depending on your AD and your groups.