Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Let's say a company has a large number of users, and each user has a home area.

On each share used for home area folders, I would like to define some rules saying who is supposed to have which permissions on the folder.

Then I would like to audit automatically, that this is actually the case and get some sort of report on deviations.

So a rule for \MegaServer\Home01 could be defined something like:

  • Domain Admins - Full Control
  • Backup Agent - Read
  • [Home folder owner] - Full Control

I am talking about Windows platform and Windows servers, although I think it would most likely also work for *nix machines that expose Windows shares.

Does software like this exist?

I could roll my own basic version, but if something already exists, that is usually a better option.

I am aware of tools to make displaying permissions easier (AccessEnum, DumpSec), but that is not what I am looking for.

share|improve this question

Using a tool like SUBInACL and/or PowerShell (Get-ACL; Set-ACL) would solve your problem while also allowing you to script it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.