Have you tried showacls.exe? Comes with Windows resource kit I guess.

If building one on your own is an option, here's an excellent win sec programming starter, (.Net makes it easy)
http://pluralsight.com/wiki/default.aspx/Keith.GuideBook/HowToProgramACL
s.html


Randhir Vayalambrone
"In my opinion, we don't devote nearly enough scientific research to finding a cure for jerks. " C&H

----- Original Message ----
From: fluidnyc (at) gmail (dot) com [email concealed]
To: focus-ms (at) securityfocus (dot) com [email concealed]
Sent: Thursday, February 16, 2006 3:02:57 PM
Subject: Retriving ACL's on 60 thousand folders

Hi:

I am looking for a tool that will help me retrive ACL's on about 60000 folders on a network/NTDomain.

I know about AccessEnum & DumpACL, but i need something that can show me "all" the permissions in the list and not just read/execute/deny. I need something little more accurate.

Something that will give me info from the whole ACL like:

Full Control
Modify
Read & Execute
List
Read
Write
Special Perm

I also have to store this info into a txt file or an access db, or excel spreadsheet so i can compare other servers to this one servers ACL's.

Any advise is appreciated.

Thanks.

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]