File Share Auditing

[saratoga172]

I'm working on auditing and reworking our file shares at work. They are in need of serious help. Last time I did this it took over 20 hours of work over a two day stretch.

I'm looking to create some kind of documentation or Excel spreadsheet that can help myself and my team keep track of changes and who needs access to what etc.

Are there any tools or native options to getting a dump of all file shares and the security assigned to each folder/file? Even if it isn't pretty I can parse through the info over the next week since this will become a fairly regular thing I'll be managing (yay incompetent co-workers that keep messing up).

Overall I'd like something that gives a nice neat breakdown but if there is a command that'll dump all security to a text or csv file that would be extremely beneficial to me. I've searched Google briefly but my Google-fu skills are lacking.

If anyone needs to know these are a mixture of Windows Server 2003 and Windows Server 2008 R2. Working on converting to all 08 R2. Also working on fixing AD groups which will be a godsend (again other members of my team borked it).

Thanks in advance.

 

[saratoga172]

So many views and no responses?

Think I may have answered my question after some more searching using different search terms. Found this program called AccessEnum from SysInternals I'm testing out as I type this:
http://technet.microsoft.com/en-us/sysinternals/bb545046.aspx

Any other suggestions or anything better?

 

[Mogadon]

There is ShareEnum, which looks like it provides similar features to AccessEnum but for network shares:
http://technet.microsoft.com/en-us/sysinternals/bb897442.aspx


You should also be able to put together a PowerShell script to run an audit on your network's fileshare's and output the results into a spreadsheet.

Check this Google search:
https://www.google.com/#bav=on.2,or.r_qf.&fp=df7b597ec88e6e62&q=powershell+file+share+audit

or a direct link to an option here:
http://blog.chrislehr.com/2011/10/powershell-output-file-share-info-to.html


And, here's another option from Solarwinds that seems to provide some kind of permissions analysis features on file shares.
http://www.solarwinds.com/products/freetools/permissions_analyzer_for_active_directory/


I have not personally tried any of the options but they seem like a good starting point for what you want.

 

[ImpulsE69]

Our company uses volscan to do their inventory of files. I don't really know much about it, but they use it against 1000's of NAS shares.