One of my clients has something called "Varonis" that tracks security changes to file systems. They like it because it allows them (among the security changes) to see when a user has, for example, picked up a folder and moved it under another folder.
I do AD and Exchange for them, I'm not involved with their file management, but it might be something to look at. I have no idea how good/bad/etc. it is. ________________________________ From: Sherry Abercrombie [saber...@gmail.com] Sent: Thursday, May 14, 2009 8:48 AM To: NT System Admin Issues Subject: Re: AD groups search to find out where group is all applied in domain You might take a look at Sysinternals. There might be some utilities there that could accomplish what you want.....I'm thinking maybe ShareEnum might be a possibility...... On Wed, May 13, 2009 at 7:50 PM, Kurt Buff <kurt.b...@gmail.com<mailto:kurt.b...@gmail.com>> wrote: On Wed, May 13, 2009 at 04:43, Bill K <cwsball...@gmail.com<mailto:cwsball...@gmail.com>> wrote: > I have AD groups I would like to do a "reverse lookup" > to find out all the servers/shares that the group > is applied on within the domain. > > This would be a great tool for finding out what legacy > AD groups give access to if it was never documented. > > Does anyone know how to do this? Querying all of the servers on all of the facilities? Exchange, IIS, Sharepoint, SQLServer and all of the others from MSFT, and perhaps including, say, Oracle, MySQL, Postresql, Rightfax, Samba, OpenLDAP, etc., etc., etc.? Even just the MSFT software would be quite the task. Good luck with that. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ -- Sherry Abercrombie "Any sufficiently advanced technology is indistinguishable from magic." Arthur C. Clarke ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
