Advanced Windows PowerShell Scripting Video Training

Advanced Windows PowerShell Scripting Video Training
Advanced Windows PowerShell Scripting Video Training

Wednesday, September 23, 2009

Is there a tool for determining a users effective permissions through a network a share?

Determining a users effective permission is a very challenging task. Below are some conditions that could effect the effective permissions a user experiences:

  • Anonymous Logon
  • Batch, Creator Group
  • Dialup
  • Enterprise Domain Controllers
  • Interactive
  • Network
  • Proxy
  • Restricted
  • Remote
  • Service
  • System
  • Terminal Server User
  • Other Organization
  • This Organization

Further still is accessing the data through a share. This is the problem. After some searching, I have not been able to find a tool that determines the users effective permission when taking network share access into account. The formula that is generally used for a manual determination is:

· Determine the effective NTFS permission level.

· Determine the effective Share permission level.

· The most restrictive between the two is the effective permission.

A useful tool would have to ask under what conditions is the user connecting? From the list above, there are many potential answers.

No comments: