Posted On April 5, 2019

How to Check NTFS Effective Permission Access of a User

kimconnect 0 comments
blog.KimConnect.com >> Windows >> How to Check NTFS Effective Permission Access of a User

Right-click on the Folder > Properties > Security tab > Advanced > Effective Access tab > click on Select a user > input username > OK > View effective access

PowerShell Method:

$item='c:\temp'
get-acl $item|select -expand Access

# Sample output

FileSystemRights : FullControl
AccessControlType : Allow
IdentityReference : Everyone
IsInherited : False
InheritanceFlags : ContainerInherit, ObjectInherit
PropagationFlags : None

FileSystemRights : FullControl
AccessControlType : Allow
IdentityReference : NT AUTHORITY\SYSTEM
IsInherited : False
InheritanceFlags : ContainerInherit, ObjectInherit
PropagationFlags : None

FileSystemRights : FullControl
AccessControlType : Allow
IdentityReference : BUILTIN\Administrators
IsInherited : False
InheritanceFlags : ContainerInherit, ObjectInherit
PropagationFlags : None

FileSystemRights : ReadData, ExecuteFile, Synchronize
AccessControlType : Allow
IdentityReference : TestWindows\kimconnect
IsInherited : False
InheritanceFlags : ContainerInherit, ObjectInherit
PropagationFlags : None

FileSystemRights : FullControl
AccessControlType : Allow
IdentityReference : TestWindows\backupadmin
IsInherited : False
InheritanceFlags : ContainerInherit, ObjectInherit
PropagationFlags : None

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Post

PowerShell: Create Registry Keys within Windows Localhost

# createRegKey.ps1 $regKeys=@( @{ hive='REGISTRY::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome'; name='ChromeCleanupEnabled'; value=0 } @{ hive='REGISTRY::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome'; name='ChromeCleanupReportingEnabled'; value=0 } ) function…

MAC: Setting Google DNS to Bypass ISP Slower Name Resolution

Open System Preferences > Network > DNS > click + (plus sign) under DNS Servers…

User Account Creation Script

1. Create Account in AD a. Select the correct container b. copy memberships of another…