ACL query

Anything VBScript-related, including Windows Script Host, WMI, ADSI, and more.
Forum rules
Do not post any licensing information in this forum.

Any code longer than three lines should be added as code using the 'Select Code' dropdown menu or attached as a file.
Locked
User avatar
rmiller75
Posts: 12
Meble kuchenne na zamówienie - na wymiar - Wrocław
Joined: Wed Oct 18, 2006 5:45 am

ACL query

Post by rmiller75 »

Hey All, I have a general question:Is there a way to query all servers in your enterprise to discover what a group grants access to?Thanks.

User avatar
rmiller75
Posts: 12
Joined: Wed Oct 18, 2006 5:45 am

ACL query

Post by rmiller75 »

Hey All, I have a general question:Is there a way to query all servers in your enterprise to discover what a group grants access to?Thanks.

jvierra
Posts: 14444
Joined: Tue May 22, 2007 9:57 am
Contact:

ACL query

Post by jvierra »

Tough question.

Yes - their are many third party tools that can do this.
No - there is no "builtin" method for doing thids in one command.

You can use SUBINACL to query each individual server for the file, service and registry ACL entries.

There is NO WAY using script with objects or WMI to get all of this information. It can only be accessed VIA the API calls which are only exposed for teh registry anbd services via SUBINACL. (Except in WIndows Vista and WS2009 ) .


Locked