Determining a users effective permission is a very challenging task. Below are some conditions that could effect the effective permissions a user experiences:
- Anonymous Logon
- Batch, Creator Group
- Enterprise Domain Controllers
- Terminal Server User
- Other Organization
- This Organization
Further still is accessing the data through a share. This is the problem. After some searching, I have not been able to find a tool that determines the users effective permission when taking network share access into account. The formula that is generally used for a manual determination is:
· Determine the effective NTFS permission level.
· Determine the effective Share permission level.
· The most restrictive between the two is the effective permission.
A useful tool would have to ask under what conditions is the user connecting? From the list above, there are many potential answers.