Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are doing some tidying up of Active Directory on our SBS 2003 domain controller.

A number of security groups exist which I am 95% sure are redundant. I want to be 100% sure they are not used anywhere before I delete them.

I would like to find a way to produce a comprehensive report listing all NTFS and share permissions associated with either a user or security group. Presumably I need a 3rd party program to do this?

Has anyone here done something like this before?

Any suggestions would be greatly appreciated.

share|improve this question
Surely someone has some thoughts on this? – Austin ''Danger'' Powers Jul 14 '13 at 13:45
You might want to try AccessEnum – Dusan Bajic Jul 14 '13 at 17:36
That's exactly the sort of thing I am looking for. Thanks. – Austin ''Danger'' Powers Jul 15 '13 at 1:30
Cool, I'll post that as an answer so you can accept. – Dusan Bajic Jul 15 '13 at 9:10
AccessEnum seems to have quite a basic interface- there could be better options out there. It could be quite difficult for me to use on our server with 720GB of data (mostly consisting of small documents). If no one else chimes in with any better answers then I'll accept this one next week :) – Austin ''Danger'' Powers Jul 15 '13 at 9:52

You might want to try AccessEnum

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.