Generating user lists

[drewmaztech]

Auditor time!
I need some kind of util to list all users and all their permissions on a particular server. (Windows 2000).

Perms.exe only does a list of a single user. I want to list all users and all perms.

Any suggestions?

[Ya_know]

Try: AddUsers Automates Creation of a Large Number of Users

It may not do everything you are looking for, but it's a start. Like to know what you use if you find the gem utility!

[CeeBee]

Dump the names of the users in a text file, let's say userlist.txt
Make sure only the names are present, one on each line. Otherwise you'll have to mess with the parameters for the FOR commmand.

Then make a batch file, say audit.bat
for /f %%i in (userlist.txt) do call listrights.bat %%i

And make another batch file listrights.bat:
echo Listing user rights for: %1>>rights.txt
perms.exe MYDOMAIN\%1 PathToCheck>>rights.txt
echo -------------------->>rights.txt

Can't think of anything easier now.

[drewmaztech]

I found a program called "DumpSec". It's pretty nice. Dumps all different kinds of domain info/user info/share info. I can just save it as a text file, Import it into Excel or Access and work with the info from there.

Better yet - it's free!

[Coyotemac]

I found a program called "DumpSec". It's pretty nice. Dumps all different kinds of domain info/user info/share info. I can just save it as a text file, Import it into Excel or Access and work with the info from there.

Better yet - it's free!

Yes, DumpSec (aka dumpacl) is a great tool! - Does have some buggy things about it when you start looking at permissions though. I highly recommend getting the data in excel - you can use the autofilters to quickly find anything.