I'm trying to troubleshoot some issues with our IIS7 FTP site--namely, why some users have access to the site when it doesn't look like they should. The basic problem is that I do not understand NTFS / Active Directory permissions very well.
Does anyone know if any tools exist that allow you to view where permissions are coming from? For example, if I have read access to a particular folder, what is the source of that permission? I know the basics such as group membership and inherited permissions, but I'm running into situations where a user does not appear to be part of any group that has permissions to a resource, and yet is able to access that resource nonetheless. Clearly I lack an understanding of how/what permissions are inherited, what overrides what, etc.
In addition to tools that might help analyze/learn about permissions, I would welcome suggestions on the best way to get a thorough understanding of permissions. Favorite books, articles, etc. Thanks!