how to verify file permission?

[calaver4]

I would like to clean up groups in my domain, so I need to verify if the group is still in use. The file system is quite big (250.000 files).
I've tried to use fileacl, subinacl and xcacls, but the output is very verbose so it's not easy to check if a group is still in use.

Any idea on how to accomplish this job?

Thank you in advance.

 

[josephdavis]

Give AccessEnum a try.

http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx

-Joe

-Joe

http://josephmdavis.com

 

[calaver4]

Thanks Joseph, I tried AccessEnum and AccessChk but they are not what I'm looking for.

I have discovered that I was using an old version of subinacl, so I have downloaded the latest version and I have read more accurately the help. subinacl does what I need. This is the an example:

subinacl /outputlog=c:\temp\log.txt /testmode /statistic
/noverbose /file=directoriesonly
c:\temp\*.* /findsid=domain_name\group_name
/display

Bye