Announcement

Collapse
No announcement yet.

Permissions

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Permissions

    I have to list all permissions on all users and I'm just wondering if anyone knows an easy way to retrieve this or is there a tool I can use to view permissions on all users via the tree...??

    Thanks guys!

    JB

  • #2
    Re: Permissions

    Hi Julie

    This should sort you out: http://www.sysinternals.com/Utilities/AccessEnum.html

    Hope it helps
    Server 2000 MCP
    Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

    ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

    Comment


    • #3
      Re: Permissions

      Thanks for that tool......

      Question:

      When I see
      s-1-5-21-1993962763-21...etc with type allow and full control not inherited on an application, file or folder, I understand this number to be a computer SID that should or shouldn't be in the permission window of the application, file, or folder properties window?? I mean along with admins, everyone, system, etc I'm wondering about this "number" having permissions to these objetcs.....

      Thanks for helping....

      Julie

      Comment


      • #4
        Re: Permissions

        Usually the SID is resolved to the container name that it is associated with (Users, groups, computer accounts etc... everything has a SID that can have security set with it).

        When you see a SID instead of the name then it could be that the account has been deleted and the permissions are still on the object you are looking at.

        I maybe wrong but i seem to remember that if an account starts with s-1-5 it is the local admin account. But i maybe wrong about that.
        Server 2000 MCP
        Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

        ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

        Comment


        • #5
          Re: Permissions

          Thanks, you're right...but I also found that....the Administrator account on a Windows computer always ends with 500, so I guess that's the only one I'm concerned with at this point so in the properties window of any folder, file, apps....when I find these ending in 500 I delete it.

          I guess it's a target for hackers...that's the one they're looking for....it's an easy target so I deleted....I'll probably have to delete it w/in all folder properties, security windows.....well, wait, maybe it's in the registry......

          Comment

          Working...
          X