Posted by Chris on February 20, 2009 in PowerShell | Tags :acl, permissions, PowerShell, securitydescriptor, wmi
The cmdlet Get-ACL is very capable when it comes to NTFS permissions, but it cannot read share permissions. This function makes an effort to provide a simple way to return share security (and other information) from a share.
more >>
Posted by Chris on February 19, 2009 in VbScript | Tags :acl, ntfs, permissions, securitydescriptor, vbs, VbScript, wmi
NTFS (File System) and Share security can be enumerated using the Win32_LogicalFileSecuritySetting and Win32_LogicalShareSecuritySetting WMI classes. This post demonstrates how to use each class to read the security descriptors.
more >>
Posted by Chris on October 28, 2008 in Active Directory, Exchange, VbScript | Tags :acl, Active Directory, Exchange, permissions, securitydescriptor, vbs, VbScript
A script to read the mailbox security descriptor from Active Directory with the intention of finding a particular user or security principal. It will not display the security descriptor, it simply displays whether or not the account is present in the access control list.
more >>
Posted by Chris on October 22, 2008 in VbScript | Tags :acl, ntfs, permissions, securitydescriptor, vbs, VbScript, wmi
This script uses WMI to enumerate each access control entry in an NTFS access control list, looking for explicit entries, that is, entries that are not inherited.
more >>
Posted by Chris on October 22, 2008 in PowerShell | Tags :acl, ntfs, permissions, PowerShell, securitydescriptor
A short script to list explicit rights assigned to a directory structure. It uses the recursive option of ls (an Alias for Get-ChildItem) to drop down through the directory structure.
more >>