Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

One of our users is requesting a list of the users and groups that have access to two folders on the network, as well as all of the subfolders of both of these folders. There are hundreds, if not thousands, of subfolders. Is there an automated way that I can do this?

share|improve this question

I would use get-acl from powershell:

get-childitem -recurse | where {$_.psiscontainer}|get-acl


  1. gets the directory list (recursivly)
  2. if it so happens that the item on the pipeline is a container (folder)...
  3. retrieve the ACL list
share|improve this answer
Would this specify permissions on just the folders and sub-folders, or will it also list file permissions? (The former is what I'm after) – Citizen Chin Nov 29 '11 at 16:37
See the edit for details – Jim B Nov 29 '11 at 16:38

You might also try the SolarWinds tool for this, though it's not great at recursion.

share|improve this answer
I'll give it a try. I'm currently running Systernals AccessEnum, which might be too granular. It appears that it's listing permissions for every file within the folders and subfolders, and not just the folder and subfolder permissions. – Citizen Chin Nov 29 '11 at 16:36

cacls.exe should do what you require, its a bit hard to read but that comes with the territory of doing such a task on command line.

share|improve this answer
Unfortunately, using cacls would be far too cumbersome and time consuming for this task. – Citizen Chin Nov 29 '11 at 16:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.