I use fileacl.exe to do a dump, and wrote a perl script that runs daily
to diff the changes. I don't think it's necessary to monitor every
folder down the tree. You really only care about the root level and
couple of sub-dirs down since most folder permissions have inheritance
set on.
-----Original Message-----
From: Steve Fletcher [mailto:safletcher@insightbb.com]
Sent: Monday, February 20, 2006 12:05 AM
To: fluidnyc@gmail.com; security-basics@securityfocus.com
Subject: RE: Tool for checking ACL's on 60 thousand folders
You might want to try XCACLS.VBS. It's a VBscript from Microsoft that
allows viewing and modifying the NTFS permissions on files and
directories.
While it is not extremely fast, it seems to do a pretty good job.
Steve Fletcher
MCSE (NT4/Win2k), MCSE: Security (Win2k), HP Master ASE, CCNA, Security+
Email: safletcher@insightbb.com
Web: http://safletcher.home.insightbb.com
-----Original Message-----
From: fluidnyc@gmail.com [mailto:fluidnyc@gmail.com]
Sent: Thursday, February 16, 2006 2:11 PM
To: security-basics@securityfocus.com
Subject: Tool for checking ACL's on 60 thousand folders
Hi:
I have to check ACL's on 60 thousand folders.
What would be the best tool to use that would show me "ALL" of the the
ACL's permissions that are on these network folders.
Thanks.
(AccessEnum and DumpACL I already know about.)
------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and
the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and
the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning, Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---
-----------------------------------------
*******************************************************************
*
This e-mail is intended only for the addressee named above.
As this e-mail may contain confidential or privileged information,
if you are not the named addressee, you are not authorized
to retain, read, copy or disseminate this message or any part of
it.
*******************************************************************
*
---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
