RE: Listing all groups / finding a group on shared folders security

2012-09-27 Thread David Lum
DUMPSEC. Free. http://www.systemtools.com/somarsoft/index.html -Original Message- From: Michael Leone [mailto:oozerd...@gmail.com] Sent: Thursday, September 27, 2012 7:27 AM To: NT System Admin Issues Subject: Listing all groups / finding a group on shared folders security I have this

RE: Listing all groups / finding a group on shared folders security

2012-09-27 Thread David Lum
BTW, I know *EXACTLY* How you feel. We have a lot of groups created before I was here and the description says simply for access to files. Along the same lines, how do folks here go about auditing security groups and knowing if they are still valid or if the members list is still appropriate?

Re: Listing all groups / finding a group on shared folders security

2012-09-27 Thread Michael Leone
Thanks. For some reason, I seem to only get Access Denied when I point it as some share, even tho I have access to that share. DUMPSEC.exe /computer=\\File-Server /rpt=dir=\\File-Server\DOCS /outfile=D:\DOCS.dcl If I browse to \\File-Server\DOCS, I can see everything, all files and

RE: Listing all groups / finding a group on shared folders security

2012-09-27 Thread Christopher Bodnar
@nwea.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 09/27/2012 10:45 AM Subject:RE: Listing all groups / finding a group on shared folders security BTW, I know *EXACTLY* How you feel. We have a lot of groups created before I was here and the description

RE: Listing all groups / finding a group on shared folders security

2012-09-27 Thread Free, Bob
: Listing all groups / finding a group on shared folders security BTW, I know *EXACTLY* How you feel. We have a lot of groups created before I was here and the description says simply for access to files. Along the same lines, how do folks here go about auditing security groups and knowing

Re: Listing all groups / finding a group on shared folders security

2012-09-27 Thread Kurt Buff
That's why I name my groups descriptively. If the group is for read-only access by US staff to the HR directory in the departments share on the home file server, I name it as US-HomeDepartmentsHR-RO If the group is for read-write access by the UK staff to a SQL database name CustomerProfiles in

RE: Listing all groups / finding a group on shared folders security

2012-09-27 Thread David Lum
: Listing all groups / finding a group on shared folders security That's why I name my groups descriptively. If the group is for read-only access by US staff to the HR directory in the departments share on the home file server, I name it as US-HomeDepartmentsHR-RO If the group is for read-write access

Re: Listing all groups / finding a group on shared folders security

2012-09-27 Thread Michael Leone
On Thu, Sep 27, 2012 at 1:04 PM, Kurt Buff kurt.b...@gmail.com wrote: That's why I name my groups descriptively. If the group is for read-only access by US staff to the HR directory in the departments share on the home file server, I name it as US-HomeDepartmentsHR-RO I do the same. Well, we

Re: Listing all groups / finding a group on shared folders security

2012-09-27 Thread Michael Leone
On Thu, Sep 27, 2012 at 1:04 PM, Kurt Buff kurt.b...@gmail.com wrote: The good thing about this is that you can then populate those descriptive groups with the base groups for departments or workgroups, and when someone moves to a new position, you remove them from their no longer relevant

Re: Listing all groups / finding a group on shared folders security

2012-09-27 Thread Kurt Buff
Issues Subject: Re: Listing all groups / finding a group on shared folders security That's why I name my groups descriptively. If the group is for read-only access by US staff to the HR directory in the departments share on the home file server, I name it as US-HomeDepartmentsHR-RO

Re: Listing all groups / finding a group on shared folders security

2012-09-27 Thread Kurt Buff
On Thu, Sep 27, 2012 at 11:17 AM, Michael Leone oozerd...@gmail.com wrote: On Thu, Sep 27, 2012 at 1:04 PM, Kurt Buff kurt.b...@gmail.com wrote: The good thing about this is that you can then populate those descriptive groups with the base groups for departments or workgroups, and when