ACL query

Anything VBScript-related, including Windows Script Host, WMI, ADSI, and more.
Forum rules
Do not post any licensing information in this forum.

Any code longer than three lines should be added as code using the 'Select Code' dropdown menu or attached as a file.
Locked
User avatar
rmiller75
Posts: 12
Joined: Wed Oct 18, 2006 5:45 am

ACL query

Post by rmiller75 » Thu Nov 08, 2007 2:14 am

Hey All, I have a general question:Is there a way to query all servers in your enterprise to discover what a group grants access to?Thanks.

User avatar
rmiller75
Posts: 12
Joined: Wed Oct 18, 2006 5:45 am

ACL query

Post by rmiller75 » Thu Nov 08, 2007 2:14 am

Hey All, I have a general question:Is there a way to query all servers in your enterprise to discover what a group grants access to?Thanks.

User avatar
jvierra
Posts: 13730
Joined: Tue May 22, 2007 9:57 am
Contact:

ACL query

Post by jvierra » Thu Nov 08, 2007 2:51 am

Tough question.

Yes - their are many third party tools that can do this.
No - there is no "builtin" method for doing thids in one command.

You can use SUBINACL to query each individual server for the file, service and registry ACL entries.

There is NO WAY using script with objects or WMI to get all of this information. It can only be accessed VIA the API calls which are only exposed for teh registry anbd services via SUBINACL. (Except in WIndows Vista and WS2009 ) .


Locked