1

So I have two directory hierarchies one on Windows Server 2003 and another on Windows Server 2008 R2.

The directory on Windows Server 2008 R2 was created before hand by right clicking and creating a new folder.

I copied them from the one hierarchy to the other using xcopy

XCOPY \\server2003\Reporting \\server2008\c$\Reporting /O /X /E /H /K /Y /I

But the permissions and Owners are not the same even though /O is supposed to copy ACLs and Owners. What's going on here? The files still get some of the inherited ACLs from the Server 2008's C$ drive.

It makes me worry that the permissions aren't the same on everything; so how do I know that a child file or folder hasn't broken inheritance?

1 Answer 1

2

The Sysinternals tool AccessEnum might be able to help. It's a GUI that will recursively scan the permissions from the selected location and let you see where things diverge (if at all).

From the link:

While the flexible security model employed by Windows NT-based systems allows full control over security and file permissions, managing permissions so that users have appropriate access to files, directories and Registry keys can be difficult. There's no built-in way to quickly view user accesses to a tree of directories or keys. AccessEnum gives you a full view of your file system and Registry security settings in seconds, making it the ideal tool for helping you for security holes and lock down permissions where necessary.

AccessEnum screenshot

3
  • Tried doing this on a UNC path and it didn't work...the program crashes...is it too old for that?
    – leeand00
    May 19, 2015 at 15:22
  • Are you supposed to just run it locally?
    – leeand00
    May 19, 2015 at 15:35
  • I believe it is intended to be run locally. It's been a while since I've used it and it hasn't been updated in a while either. May 19, 2015 at 17:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.