RE: Tool for checking ACL's on 60 thousand folders

["Huang, John, GCM" <John.Huang () rbsgc com>]

I use fileacl.exe to do a dump, and wrote a perl script that runs daily
to diff the changes. I don't think it's necessary to monitor every
folder down the tree. You really only care about the root level and
couple of sub-dirs down since most folder permissions have inheritance
set on.

-----Original Message-----
From: Steve Fletcher [mailto:safletcher () insightbb com] 
Sent: Monday, February 20, 2006 12:05 AM
To: fluidnyc () gmail com; security-basics () securityfocus com
Subject: RE: Tool for checking ACL's on 60 thousand folders

You might want to try XCACLS.VBS.  It's a VBscript from Microsoft that
allows viewing and modifying the NTFS permissions on files and
directories.
While it is not extremely fast, it seems to do a pretty good job.

Steve Fletcher
MCSE (NT4/Win2k), MCSE: Security (Win2k), HP Master ASE, CCNA, Security+
Email:  safletcher () insightbb com
Web:  http://safletcher.home.insightbb.com
 
-----Original Message-----
From: fluidnyc () gmail com [mailto:fluidnyc () gmail com]
Sent: Thursday, February 16, 2006 2:11 PM
To: security-basics () securityfocus com
Subject: Tool for checking ACL's on 60 thousand folders

Hi:

I have to check ACL's on 60 thousand folders.

What would be the best tool to use that would show me "ALL" of the the
ACL's permissions that are on these network folders.

Thanks.

(AccessEnum and DumpACL I already know about.)

------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and
the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,

Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and
the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning, Computer Emergency Response Teams, and Digital Investigations.


http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---




-----------------------------------------
*******************************************************************
*

This e-mail is intended only for the addressee named above.
As this e-mail may contain confidential or privileged information,
if you are not the named addressee, you are not authorized
to retain, read, copy or disseminate this message or any part of
it.

*******************************************************************
*


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------