File/Folder Security Auditing

LeaUK · 28th November 2008

Hi All

Can anyone recommend a tool to display file/folder security mappings against security groups and preferably list those users within those groups also?

Wouldn't mind some kind of regular comparitive audit functionality too..

I've looked at the usual collection of Sysinternals tools and whilst they're very useful I need perhaps an all-in-one tool with nice reporting output (for management view).

I've reviewed briefly:

AccessChk
ShareEnum

PC Remote Permissions Audit - Audit Shares and Folders Permissions Remotely

And this looks mega bucks:
http://www.scriptlogic.com/products/...rter/windows/#

But wondered if anyone has recommendations?

Budget up to £500

Cheers
Lea

heypresto · 28th November 2008

Not sure if this is the right sort of thing - had an email from Quest about it yesterday:
http://www.quest.com/access-manager/

wise · 28th November 2008

its output is in cmd but you could pipe to a txt file and make nice in excel - cacls command.

wise · 28th November 2008

or xcacles in vb script - never used this one, but looks ok

Vbs that List folder & subfolder Permission : VBscript, Internet Explorer 7

LeaUK · 28th November 2008

Thanks, but it's needs to be GUI driven really - need to target the users of said app!

I also found this: EMCO Permissions Audit XML - Audit permissions in network

Not megga intuitive, but GUI and within budget. Running the trial now...

Lea

LeaUK · 1st December 2008

Oh, thanks for the Quest link too, will investigate. Yeah, I've uses cacls before, but it's just all the formatting. Was hoping for a thirdparty tool all done and dusted.

Cheers
Lea

PeteK · 1st December 2008

Quote:

Originally Posted by LeaUK

Oh, thanks for the Quest link too, will investigate. Yeah, I've uses cacls before, but it's just all the formatting. Was hoping for a thirdparty tool all done and dusted.

Cheers
Lea

Is this for a data move, or just purely an audit? Reason I asked is I've rattled together a number of scripts over time for extracting share/folder permissions, matching against user accounts and in some cases replicating on (perhaps) new hardware, so if it is something in particular you are after I might be able to help. GUI is not my baby really so can't help on the GUI tools too much. Might be worth a butchers over at pnltools.com as they used to have some tidy stuff tho.

LeaUK · 19th December 2008

Ended up reviewing EMCO and Quest Reporter

Love Quest - but it blows the budget out by quite some way as cost is per active AD account.

Mind you there is scope for price negotiation ;-)

It's definately Enterprise level and produces wonderfull reports.

Lea