I have a user that has read access to a folder.
But they aren't in any AD groups that should have read access to that folder, the don't have explicit rights on the folder or any of the parents, nor are they an owner of the folder.
However, they still have Traverse/List/Read/Read-Extended permissions.
Is there a way to tell what's giving them those rights (an AD group, etc.)?