Sign in with
Sign up | Sign in
Your question

Security groups identifed on 2000 network

Last response: in Windows 2000/NT
Share
Anonymous
a b 8 Security
July 27, 2005 6:10:09 PM

Archived from groups: microsoft.public.win2000.security (More info?)

Hello.

How can one identify security groups access on network? For example does
ABC group have access to \\servera\public\finance and also on
\\servera\public\admin\projects. Is there a utiliy or a command to issue for
what I am looking for? Thanks for your help in advance.
Anonymous
a b 8 Security
July 28, 2005 8:43:16 AM

Archived from groups: microsoft.public.win2000.security (More info?)

In article <89CB0B78-C4E1-40EE-8CEE-ACA80CE05603@microsoft.com>,
g000se@discussions.microsoft.com says...
> Hello.
>
> How can one identify security groups access on network? For example does
> ABC group have access to \\servera\public\finance and also on
> \\servera\public\admin\projects. Is there a utiliy or a command to issue for
> what I am looking for? Thanks for your help in advance.
>
Download DumpSec.exe from www.somarsoft.com. It can show you both Share
security (which you indicate above) and the NTFS perms below. Will also
show group memberships and user rights.

Brian
--
==
Brian Komar
MVP - Windows - Security
http://www.identit.ca/blogs/brian
Anonymous
a b 8 Security
August 1, 2005 10:52:30 AM

Archived from groups: microsoft.public.win2000.security (More info?)

Reversing the view into permissions grants, to see
"given this principal to what all does it have access"
is not simple in Windows. In part this is due to the
richness of the permitting model of Windows, and in
part it is due to performance considerations (the system
does not maintain this reverse indexing).
For this reason I strongly suggest that you adopt a
naming convention and change control method that
assists in transparency for this type of inquiry, as it
is only a deployment's choices that can surface this
information in a form that assists in management.
Hence, after you have performed the exhaustive
enumeration of what is there (as is needed) you
could consider some renaming and restructuring so
that you can capture the info discovered.

--
Roger Abell
Microsoft MVP (Windows Security)

"g000se" <g000se@discussions.microsoft.com> wrote in message
news:89CB0B78-C4E1-40EE-8CEE-ACA80CE05603@microsoft.com...
> Hello.
>
> How can one identify security groups access on network? For example does
> ABC group have access to \\servera\public\finance and also on
> \\servera\public\admin\projects. Is there a utiliy or a command to issue
for
> what I am looking for? Thanks for your help in advance.
!