Page 1 of 1
ACL query
Posted: Thu Nov 08, 2007 1:14 am
by rmiller75
Hey All, I have a general question:Is there a way to query all servers in your enterprise to discover what a group grants access to?Thanks.
ACL query
Posted: Thu Nov 08, 2007 1:14 am
by rmiller75
Hey All, I have a general question:Is there a way to query all servers in your enterprise to discover what a group grants access to?Thanks.
ACL query
Posted: Thu Nov 08, 2007 1:51 am
by jvierra
Tough question.
Yes - their are many third party tools that can do this.
No - there is no "builtin" method for doing thids in one command.
You can use SUBINACL to query each individual server for the file, service and registry ACL entries.
There is NO WAY using script with objects or WMI to get all of this information. It can only be accessed VIA the API calls which are only exposed for teh registry anbd services via SUBINACL. (Except in WIndows Vista and WS2009 ) .