Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Scripts or tool to list the permission of DFS root shared folders RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    Are there any scripts to list out the shared permission of DFS root folder? 

    I hope the tool can list only the top and second level of DFS shared folders’ permission on the file server or all of the DFS Server.

    or: I hope the tool can list the permission of the folders what i designation, but not all of the shared folder. because we have lots of shared permission in our domain.

    I tried this tool:

    AccessEnum v1.32

    http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx

    It can only list the specified path of the shared folder, or all of the shared folder. such as, it will list all of the shared folders under \\domain.com\projects

    If the way above is hard, please think about the way below:

    I can export the path of the shared folders, but how can i export the permissions of these folders? 

     

    Thank you !

    Best regards,

    Lester Chen
    • Moved by Rich Prescott Saturday, December 31, 2011 11:50 PM DFS Permissions (From:The Official Scripting Guys Forum!)
    Thursday, December 29, 2011 10:57 AM

Answers

  • Question
    Sign in to vote
    1
    Sign in to vote

    YOu can write a script to list folders to whatever level you need. 

    If you do not want to write a script then I recommend posting in teh WIndows Server forums for users.

    PowerShell can list the permissions of files and folders using Get-Acl.

    dir \\server\share  | .. process results and recursively list n levels.

    There are dozens of commandline utilities to list share permissions.  Try the Windows Server forum for assistance finding a utility that can do what you need.

     

     

    jv
    Tuesday, January 3, 2012 3:12 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Sorry, I ask the question there, but they ask me to here. I think it's script related.

    http://social.technet.microsoft.com/Forums/en-GB/winserverfiles/thread/b3a53976-d567-4319-85f0-2397d2a5658c

     

    Best regards,

    Lester Chen

    No.  They gave you the same answer that I have given.

    Use the share tools in WMI to list the shares.

    I think I would start by studying the material I gave you on what the DFS is.  YOu are under some mistaken idea that is is a file sharing system like NT File Sharing.  It is, in fact, a way to place resources under a common namespace that will persist even if resources are moved. 

    Windows is a complex environment.  It yuou were trained in WIndows server technologies and the extensions and enhancements available you would likely understand why your queston is a problem.

    Read the material I posted carefully then ask your question.

     

    jv
    Friday, December 30, 2011 1:42 AM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    This is not a scripting question.  It should be asked in teh WIndows Server Forum.

    To get an understanding of DFS and the tools used to mage DFS start here:
    http://technet.microsoft.com/en-us/library/cc962134.aspx

    The permissions you are speaking of are permissions set on teh files and folders managed under DFS.  Access to DFS is controlled by AD.  DFS is not a 'share'.  It is a service that advertises a namespace.  The namespace is usually the domain or enterprise such as contoso.com

    The shares that are added to DFS are just normal shares and can be viewed by any share utilities that can display permissions.  DFS doe not manage these shares.  It just provides name translation so resources can be found.

     

     

    jv
    • Edited by jrv Thursday, December 29, 2011 5:21 PM
    • Proposed as answer by Steef-Jan WiggersMVP Sunday, January 1, 2012 8:32 PM
    Thursday, December 29, 2011 5:17 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Sorry, I ask the question there, but they ask me to here. I think it's script related.

    http://social.technet.microsoft.com/Forums/en-GB/winserverfiles/thread/b3a53976-d567-4319-85f0-2397d2a5658c

     

    Best regards,

    Lester Chen
    Friday, December 30, 2011 1:29 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Sorry, I ask the question there, but they ask me to here. I think it's script related.

    http://social.technet.microsoft.com/Forums/en-GB/winserverfiles/thread/b3a53976-d567-4319-85f0-2397d2a5658c

     

    Best regards,

    Lester Chen

    No.  They gave you the same answer that I have given.

    Use the share tools in WMI to list the shares.

    I think I would start by studying the material I gave you on what the DFS is.  YOu are under some mistaken idea that is is a file sharing system like NT File Sharing.  It is, in fact, a way to place resources under a common namespace that will persist even if resources are moved. 

    Windows is a complex environment.  It yuou were trained in WIndows server technologies and the extensions and enhancements available you would likely understand why your queston is a problem.

    Read the material I posted carefully then ask your question.

     

    jv
    Friday, December 30, 2011 1:42 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Sorry, I have thought you know what I mean, but it's my wrong.

    My questions is how can I  list only the top and second level of shared folders’ permission on the file server. such as list the share folder's permission under the path: \\domain.com\projects , but not all of the subfolders.

    I tried this tool:

    AccessEnum v1.32  http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx

    It can only list the specified path of the shared folder, or all of the shared folder's permission. such as, it will list all of the shared folders under \\domain.com\projects

    If the way above is hard, please think about the way below:

    I can export the path of the shared folders, but how can i export the permissions of these folders? 

    Thank you !

    Best regards,

    Lester Chen
    Tuesday, January 3, 2012 2:51 AM
  • Question
    Sign in to vote
    1
    Sign in to vote

    YOu can write a script to list folders to whatever level you need. 

    If you do not want to write a script then I recommend posting in teh WIndows Server forums for users.

    PowerShell can list the permissions of files and folders using Get-Acl.

    dir \\server\share  | .. process results and recursively list n levels.

    There are dozens of commandline utilities to list share permissions.  Try the Windows Server forum for assistance finding a utility that can do what you need.

     

     

    jv
    Tuesday, January 3, 2012 3:12 AM