User's Effective Permissions on Domain?

Is it possible to inventory a user's effective permissions on network
resources (servers & folders & websites) in the user's domain?. For
example, Server A and Server B have multiple shares. Person 1 may have read
access to a share on A and is a local admin on B. Person 2 may have read
access for only 1 of the shares on Server B, etc. Persons 1 and 2 also have
read access to folders X and Y on ReportServer R through IIS/windows
authentication.

These permissions can accumulate through any number of groups or individual
permission settings, with increasing complexity.

At some point, managers ask: Can you tell me what Joe User has access to?

Are there third party security tools that do this? Microsoft analyzers?
Not a chance?

Any help appreciated.

Thanks.

Patrick
Mon May 21 19:14:21 CDT 2007



"Neil Meyer" <nmeyer@bcoe.org> wrote in message
news:e4UNDP$mHHA.4288@TK2MSFTNGP03.phx.gbl...
> Is it possible to inventory a user's effective permissions on network
> resources (servers & folders & websites) in the user's domain?. For
> example, Server A and Server B have multiple shares. Person 1 may have
> read access to a share on A and is a local admin on B. Person 2 may have
> read access for only 1 of the shares on Server B, etc. Persons 1 and 2
> also have read access to folders X and Y on ReportServer R through
> IIS/windows authentication.
>
> These permissions can accumulate through any number of groups or
> individual permission settings, with increasing complexity.
>
> At some point, managers ask: Can you tell me what Joe User has access to?
>
> Are there third party security tools that do this? Microsoft analyzers?
> Not a chance?
>
> Any help appreciated.
>
> Thanks.
>


Hi Neil,

Just out of curiosity, have you tried Google? Here's a link to search
results for "Inventorying users effective permissions on a domain"

http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=GGLG,GGLG:2005-25,GGLG:en&q=Inventorying+users+effective+permissions+on+a+domain

It looks like there are some third party tools which will do what you're
asking (although I haven't dove into each result to see how effective they
are).

Hope this helps, and have a great week :-)
Patrick.
--
Smile... Someone out there cares deeply for you.

Neil
Tue May 22 13:59:57 CDT 2007

Thanks Patrick. I found one 3rd party product...hopefully more to choose
from with more research.
"Patrick Dickey" <pd1ckey43@removethisspamfilter.msn.com> wrote in message
news:94C096B6-BB08-487E-BCAD-C5964AC80768@microsoft.com...
>
>
> "Neil Meyer" <nmeyer@bcoe.org> wrote in message
> news:e4UNDP$mHHA.4288@TK2MSFTNGP03.phx.gbl...
>> Is it possible to inventory a user's effective permissions on network
>> resources (servers & folders & websites) in the user's domain?. For
>> example, Server A and Server B have multiple shares. Person 1 may have
>> read access to a share on A and is a local admin on B. Person 2 may have
>> read access for only 1 of the shares on Server B, etc. Persons 1 and 2
>> also have read access to folders X and Y on ReportServer R through
>> IIS/windows authentication.
>>
>> These permissions can accumulate through any number of groups or
>> individual permission settings, with increasing complexity.
>>
>> At some point, managers ask: Can you tell me what Joe User has access
>> to?
>>
>> Are there third party security tools that do this? Microsoft analyzers?
>> Not a chance?
>>
>> Any help appreciated.
>>
>> Thanks.
>>
>
>
> Hi Neil,
>
> Just out of curiosity, have you tried Google? Here's a link to search
> results for "Inventorying users effective permissions on a domain"
>
> http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=GGLG,GGLG:2005-25,GGLG:en&q=Inventorying+users+effective+permissions+on+a+domain
>
> It looks like there are some third party tools which will do what you're
> asking (although I haven't dove into each result to see how effective they
> are).
>
> Hope this helps, and have a great week :-)
> Patrick.
> --
> Smile... Someone out there cares deeply for you.