Hello,
We have a shared folder structure, in which permissions are set on a security group base and not on an individual user base. Managers frequently are asking for reports that lists the actual users that have permission to enter the folder(s). So we are looking for a way we can automatically generate a report to select a specific folder (and their subfolders) and as a result we get the actual users (not the group) per folder that are member of the security group that have permission on the folder(s).
For instance:
Shared folder name: Share
NTFS Permission on share: ShareUsersRead, ShareUsersWrite
Members of ShareUsersRead: John Doe, John Smith
Members of ShareUsersWrite: John Williams
I select the folder Share and as a result, I get something like:
Share ->
Read: John Doe, John Smith
Write: John Williams
Ideally, this would be something the managers can do themself with some kind of tool, without giving them (their specific useraccount) rights on AD itself. The managers are responsible for authorizing users to be granted access.
I looked into AccessEnum. That does give me the option to select a folder, however the output lists the names of the securitygroups and not the names of the users that are members of those security groups.
Hope I made myself clear as much as possible and someone has a reporting tool or script with which we could achieve something like this.