Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to see folder/file permissions in a collapsable tree view in Windows?

What I think I need is something like:

+ folder1 - EntAdmins[RWX],JoeBloggs[R--],Administrators[RWX]]
+ folder2 - EntAdmins[RWX],JoeBloggs[RWX],JoesWife[R--]Administrators[RWX]]

And so on for lots of folders.

Ideally the tool would do something like below; when the "+" is clicked:

- folder1
|---+ Subfolder1 - EntAdmins[RWX],JoeBloggs[R--],Administrators[RWX]]
|---+ Subfolder2 - EntAdmins[RWX],JoeBloggs[R--],Administrators[RWX]]
+ folder2 - EntAdmins[RWX],JoeBloggs[RWX],JoesWife[R--]Administrators[RWX]]

Does something like this exist for Windows? I need to scan hundreds of folders for their permissions and would prefer not to do the right click and "Properties | Security | Advanced" just to see the permissions.

share|improve this question
up vote 3 down vote accepted

AccessEnum from Microsoft Sysinternals does most of what you requested. It does not however have the facility to drill down, but it's a very useful tool nonetheless.

Give it a try!

AccessEnum Screenshot

share|improve this answer
Pretty much perfect for my needs! Here's a euro: €1! It doesn't have the drill-down, but it is better because it shows sub-folders/files that have different permissions from the parent. – Seanchán Torpéist Aug 27 '09 at 17:24
I would say enjoy, but I know what a total headache sorting out ACLs on shares can be! – Izzy Aug 27 '09 at 17:58

You may be able to do something similar to what you're talking about in Windows Powershell using the following command line:

dir -recurse | where { $_.PSIsContainer -eq "TRUE" } | get-acl

Optionally, you could pipe the output to a file like this:

dir -recurse | where { $_.PSIsContainer -eq "TRUE" } | get-acl | out-file "C:\report.txt"

share|improve this answer
Thanks, I will bear this in mind, but the AccessEnum is the tool for me at the moment. – Seanchán Torpéist Aug 27 '09 at 17:25
I understand. It sounded like a good tool but I had just this morning received my PowerShell tip of the day containing a similar bit of code and thought I'd share that as an alternate means of achieving the same goal. Use what works, definitely! – Marcus Aug 27 '09 at 17:51

My tool SetACL Studio does exactly what you want. It has a tree view on the left and displays owner and permissions in the main area on the right:

enter image description here

As you can see, it even works with different object types: file system, registry, printers, services, shares, and WMI objects. You can change permissions, too, of course. And it has undo.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.