RE: enumerating folder permissions

["Jamie Wareham" <jwareham () smttest com>]

I'm not sure if I'm following you correctly, but it seems like you could
simply select "view permissions" (under advanced permissions options)
for the folder permissions.  They can see, but not change.



**************
-----Original Message-----
From: Raoul Armfield [mailto:armfield () amnh org] 
Sent: Wednesday, July 05, 2006 12:09 PM
To: security-basics () securityfocus com
Subject: enumerating folder permissions

We are currently restructuring our folder Hierarchy in conjunction with 
migrating to AD (Server 2003 R2).  One of the points our CIO wants us to

cover is the ability for specific users (Not IT staff) being able to 
select a folder and if they have permissions to access the folder also 
see who else has access to that folder.

I realize I could probably write a script that enumerates the groups 
that have permissions to the folder and then it would output the members

of those groups to a message box.  However, I am just learning how to 
script so if someone has already written something like this I would 
rather not reinvent the wheel.

Thanks in Advance.

Raoul


-- 
Raoul Armfield
rarmfield at amnh dot org

------------------------------------------------------------------------
---
This list is sponsored by: SensePost

Hacking, like any art, will take years of dedicated study and  
practice to master. We can't teach you to hack. But we can teach you  
what we've learned so far. Our courses are honest, real, technical  
and practical. SensePost willl be at Black Hat Vegas in July. To see  
what we're about, visit us at: 

http://www.sensepost.com/training.html
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: SensePost

Hacking, like any art, will take years of dedicated study and
practice to master. We can't teach you to hack. But we can teach you
what we've learned so far. Our courses are honest, real, technical
and practical. SensePost willl be at Black Hat Vegas in July. To see
what we're about, visit us at:

http://www.sensepost.com/training.html
---------------------------------------------------------------------------