Comments on: Auditing Windows Server Shares http://www.solo-technology.com/blog/2008/09/06/auditing-windows-server-shares/ A Technology Crow in search of Bright Shiny Objects Tue, 16 Mar 2010 15:01:48 -0600 http://wordpress.org/?v=2.9.2 hourly 1 By: Chris http://www.solo-technology.com/blog/2008/09/06/auditing-windows-server-shares/#comment-60564 Chris Fri, 12 Sep 2008 15:04:53 +0000 http://www.solo-technology.com/blog/?p=2250#comment-60564 Hmm, I might have to get smarter about this powershell stuff.... Thanks for the link, Joseph. Hmm, I might have to get smarter about this powershell stuff…. Thanks for the link, Joseph.

]]> By: Joseph http://www.solo-technology.com/blog/2008/09/06/auditing-windows-server-shares/#comment-60328 Joseph Thu, 11 Sep 2008 16:43:44 +0000 http://www.solo-technology.com/blog/?p=2250#comment-60328 Also this: (get-acl \\servername\sharename).Access Also this: (get-acl \\servername\sharename).Access

]]> By: Joseph http://www.solo-technology.com/blog/2008/09/06/auditing-windows-server-shares/#comment-60326 Joseph Thu, 11 Sep 2008 16:37:14 +0000 http://www.solo-technology.com/blog/?p=2250#comment-60326 Dunno if this can go far enough, but it looks promising: http://www.computerperformance.co.uk/powershell/powershell_wmi_shares.htm Dunno if this can go far enough, but it looks promising: http://www.computerperformance.co.uk/powershell/powershell_wmi_shares.htm

]]> By: Vox http://www.solo-technology.com/blog/2008/09/06/auditing-windows-server-shares/#comment-59599 Vox Mon, 08 Sep 2008 21:15:35 +0000 http://www.solo-technology.com/blog/?p=2250#comment-59599 Uhm....no clue if that's possible, never tried/needed that...so...RTFM :) Uhm….no clue if that’s possible, never tried/needed that…so…RTFM :)

]]> By: Chris http://www.solo-technology.com/blog/2008/09/06/auditing-windows-server-shares/#comment-59007 Chris Sun, 07 Sep 2008 00:26:04 +0000 http://www.solo-technology.com/blog/?p=2250#comment-59007 Awesome! That's over half the battle. Thanks for the nudge towards smbclient. The other half of the battle, however... I need to re-read the smbclient man but can it dump the perms on each share? Like, who has access and what perms? Awesome! That’s over half the battle. Thanks for the nudge towards smbclient.

The other half of the battle, however… I need to re-read the smbclient man but can it dump the perms on each share? Like, who has access and what perms?

]]> By: Vox http://www.solo-technology.com/blog/2008/09/06/auditing-windows-server-shares/#comment-58978 Vox Sat, 06 Sep 2008 22:08:08 +0000 http://www.solo-technology.com/blog/?p=2250#comment-58978 Ok, this is linux-centric, as usual, but not only because "Linux is the one true option" but because...it *is* the best option in this instance :) From a linux box (your bootable CD would work) I'd do something like: for i in listofwindowsservers.txt ; do echo $i >> resultsfile.txt &&smbclient -L -A filewithauth.txt $i >> resultsfile.txt ; done That *should* give you a file with the name of the computer followed by the shares it offers, including printers and so on. Look at "man smbclient" to get the format of the filewithauth.txt file, which cointains user/password stuff so you don't have to type it every single time...and so it won't stay in your history :) Ok, this is linux-centric, as usual, but not only because “Linux is the one true option” but because…it *is* the best option in this instance :)

From a linux box (your bootable CD would work) I’d do something like:

for i in listofwindowsservers.txt ; do echo $i >> resultsfile.txt &&smbclient -L -A filewithauth.txt $i >> resultsfile.txt ; done

That *should* give you a file with the name of the computer followed by the shares it offers, including printers and so on.

Look at “man smbclient” to get the format of the filewithauth.txt file, which cointains user/password stuff so you don’t have to type it every single time…and so it won’t stay in your history :)

]]>