Exchange Tools 02-permissions Analyzer for Active Directory

This is a free gadget provided by SolarWinds, which allows you to see how the specific domain user's permissions on a particular shared folder are, what permissions are given, and what permissions are granted.

：

Download Free Trials from SolarWinds

http://www.solarwinds.com/register/registrationb.aspx?program=1323&c=70150000000OzCs&CMP= biz-tad-tg-msexchgorg_exchft_prod_listing-paft-dl-q12014

Before downloading, we need to fill in some user's personal information, if you do not want to fill in the real information, you can fill in some.

650) this.width=650; "title=" 72c5d855adeb40c68c38b03b0260f960 "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "72c5d855adeb40c68c38b03b0260f960" src= "http://s3.51cto.com/wyfs02/M02/71/9E/ Wkiom1xujxzrknoxaah4dxrjgni743.jpg "height=" 442 "/>

After completing, go to the Download screen and click "Click here to download" to start the download.

650) this.width=650; "title=" 055859d3ffb848dcb283288ae50b5e66 "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "055859d3ffb848dcb283288ae50b5e66" src= "http://s3.51cto.com/wyfs02/M02/71/9A/ Wkiol1xuksrqb-alaahcle7erwy177.jpg "height=" 431 "/>

Once the software has been downloaded, it needs to be installed before it can be used.

650) this.width=650; "title=" b85035970a184e8880df1c784129710e "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "b85035970a184e8880df1c784129710e" src= "http://s3.51cto.com/wyfs02/M01/71/9A/ Wkiol1xuksqykz90aajhrgkrkve227.jpg "height=" 515 "/>

After the installation is complete, you need to connect to the ad before you can use it, that is, the interface specifies the ad account that has the connection to the ad and crawls the information.

650) this.width=650; "title=" f4806aeaa6b3443086aa782c9892417b "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "f4806aeaa6b3443086aa782c9892417b" src= "http://s3.51cto.com/wyfs02/M01/71/9E/ Wkiom1xujx3bwslbaahelcc8msg132.jpg "height=" 506 "/>

Here I enter the Super admin. After the input is complete, click on "Add Domain credential".

650) this.width=650; "title=" 3593f83edcc74b7ea6693039cd21e61b "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "3593f83edcc74b7ea6693039cd21e61b" src= "Http://s3.51cto.com/wyfs02/M02/71/9E/wKiom1XUjx2y_ Jkqaahq-hy9ifu054.jpg "height=" 502 "/>

The connection was successful.

650) this.width=650; "title=" 9e378542244f43bf91b2ab189375eced "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "9e378542244f43bf91b2ab189375eced" src= "http://s3.51cto.com/wyfs02/M00/71/9E/ Wkiom1xujx7zjrapaaht4yysuec418.jpg "height="/>

Click on advaced settings to select some of the advanced options.

650) this.width=650; "title=" df154cf8632f4338bf9ddf5b7c881ddd "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "df154cf8632f4338bf9ddf5b7c881ddd" src= "http://s3.51cto.com/wyfs02/M01/71/9E/ Wkiom1xujx7zup6laaju2nmfoka423.jpg "height=" 503 "/>

After the configuration is complete, we will be able to use the software normally.

650) this.width=650; "title=" Af5a7fb72d31461484c66c6ffd6609e4 "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "af5a7fb72d31461484c66c6ffd6609e4" src= "http://s3.51cto.com/wyfs02/M02/71/9E/ Wkiom1xujx6twdwlaadhziqy2fo356.jpg "height=" 549 "/>

We can specify the name of the group or user to query, and then specify the permissions that you want to query for which shared folders.

Here I type *, and the software will query all the user groups in the ad.

650) this.width=650; "title=" C52f3229c08c4c11b98e6a2734747f55 "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "c52f3229c08c4c11b98e6a2734747f55" src= "http://s3.51cto.com/wyfs02/M00/71/9E/ Wkiom1xujx-tmnmwaagzv05yni4615.jpg "height=" 550 "/>

For example, here we specify a testshare share, then specify the query user Mailuser5 permissions for the share, and then select Analyze.

The results show that MAILUSER5 for TestShare has execute file, column directory, read permission.

How does this result look? We look at the right side of the interface icon, if it is a hook, is to have the corresponding permissions, if it is a fork, is not the corresponding permissions.

650) this.width=650; "title=" c2c3cf61960f4b7594a5e4a018c73f29 "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "c2c3cf61960f4b7594a5e4a018c73f29" src= "http://s3.51cto.com/wyfs02/M01/71/9E/ Wkiom1xujx-cy0siaago9uamd28456.jpg "height=" 546 "/>

For example, if we look at the Mailuser10 for TestShare, you can see that total is all split, which means that MAILUSER5 does not have any permissions on the TestShare folder.

650) this.width=650; "title=" 92c857ebeff041149d6d7f9ef10cf617 "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "92c857ebeff041149d6d7f9ef10cf617" src= "http://s3.51cto.com/wyfs02/M02/71/9E/wKiom1XUjx_ Jbfffaagcbijzrcc381.jpg "height=" 544 "/>

Can this software not query workgroup users for permissions shared by the workgroup? The answer is: No.

If I connect to a workstation share. You will be prompted to enter a username password.

650) this.width=650; "title=" e4a469786fef438bbdc668ae579bb34c "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "e4a469786fef438bbdc668ae579bb34c" src= "http://s3.51cto.com/wyfs02/M00/71/9E/wKiom1XUjx_ Zuwlzaaibm_lec3u190.jpg "height=" 556 "/>

Then we select the software share on the workgroup machine JAMIEZENG-PC02.

650) this.width=650; "title=" 4591606993624c81a79001b59800b563 "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "4591606993624c81a79001b59800b563" src= "http://s3.51cto.com/wyfs02/M01/71/9E/ Wkiom1xujyddzl6laahr1fl7si0315.jpg "height=" 504 "/>

First specify a domain account for analysis, no results.

650) this.width=650; "title=" e394ae064a3c4a25a71f086ecf878974 "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "e394ae064a3c4a25a71f086ecf878974" src= "http://s3.51cto.com/wyfs02/M02/71/9E/ Wkiom1xujycgix6saafvy3v_lxm107.jpg "height=" 432 "/>

Then we directly specify a local account on the workgroup machine, and there is no result.

650) this.width=650; "title=" 750ead65db07419daa866355b72f6643 "style=" border-top:0px;border-right:0px; background-image:none;border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; " Border= "0" alt= "750ead65db07419daa866355b72f6643" src= "http://s3.51cto.com/wyfs02/M00/71/9E/ Wkiom1xujycqqgkpaadtlozh9_c838.jpg "height="/>

=====================================================

This article from "Zeng Hung Xin Technical column" blog, declined to reprint!

Exchange Tools 02-permissions Analyzer for Active Directory