Hi All,
I am new to powershell scripting, recently i got the task to get the shared folder details from list of servers, like(Share folder, Directory details of the path, NTFS permissions and Share permissions). i tried to use Below code which Kazun has posted but
i did not get the full output which i wanted. Below is the code which i got it from one of my colleagues friend, so i though of posting here for whom it may require.
Please no questions on the below code, as i already told i am new to Powershell, use it and modify according to your requirement, and excuse me if code is not really so good.
Thanks
*****************************************************
$computer=Get-Content .\serverlist.txt
$sharepermissions=@()
$Secutiypermissions=@()
$printline="**********************************************************************************************************************************"
foreach ($comp in $computer){
$shares=Get-WmiObject -Class win32_share -ComputerName $comp
$sharenames=$shares|select -ExpandProperty Name
$paths=$shares|Select path,Name
foreach($path in $paths) {
$fpath = $path.path.Replace('\','\\')
$SName = $path.name
$NTFSPER = Get-WmiObject -Class Win32_LogicalFileSecuritySetting -Filter "path='$fpath'" -ComputerName $comp -ErrorAction SilentlyContinue
$Shareper = Get-WmiObject -Class win32_Logicalsharesecuritysetting -Filter "name='$SName'" -ComputerName $comp -ErrorAction SilentlyContinue
if ($NTFSPER -eq $null){write-host "$fpath is not accessible "}
else{
$sharedetail = "SharePath:\\$comp\$SName
DirPath= $fpath"
$NTFS=$NTFSPER.GetSecurityDescriptor()
ForEach ($DACL in $NTFS.Descriptor.DACL)
{
#$myObj = "" | Select computer,path,name,Domain, ID, AccessMask,ShareaccessID, Shareacessper
$myObj = "" | Select NTFSpermissions,Rights
$myObj.NTFSpermissions = $DACL.Trustee.Domain + "\" + $DACL.Trustee.Name
Switch ($DACL.AccessMask)
{
2032127 {$AccessMask = "FullControl"}
1179785 {$AccessMask = "Read"}
1180063 {$AccessMask = "Read, Write"}
1179817 {$AccessMask = "ReadAndExecute"}
-1610612736 {$AccessMask = "ReadAndExecuteExtended"}
1245631 {$AccessMask = "ReadAndExecute, Modify, Write"}
1180095 {$AccessMask = "ReadAndExecute, Write"}
268435456 {$AccessMask = "FullControl (Sub Only)"}
1 {$AccessMask = "List_Directory)"}
2 {$AccessMask = "Write"}
4 {$AccessMask = "append"}
default {$AccessMask = $DACL.AccessMask}
}
$myObj.Rights = $AccessMask
Clear-Variable AccessMask -ErrorAction SilentlyContinue
$Secutiypermissions += $myObj
}
$sharedetail
$Secutiypermissions |ft -AutoSize
$sharedetail |Out-File AllShareServers.txt -Append
$Secutiypermissions |Out-File AllShareServers.txt -Append
}
if ($Shareper -eq $null){write-host "$SName is not accessible "}
else {
$shareperm=$Shareper.GetSecurityDescriptor()
ForEach ($DACL2 in $shareperm.Descriptor.DACL)
{
$myObj1 = "" | Select Sharepermissions,Rights
$myObj1.Sharepermissions = $DACL2.Trustee.Domain + "\" + $DACL2.Trustee.Name
Switch ($DACL2.AccessMask)
{
2032127 {$AccessMask = "FullControl"}
1179785 {$AccessMask = "Read"}
1180063 {$AccessMask = "Read, Write"}
1179817 {$AccessMask = "ReadAndExecute"}
-1610612736 {$AccessMask = "ReadAndExecuteExtended"}
1245631 {$AccessMask = "ReadAndExecute, Modify, Write"}
1180095 {$AccessMask = "ReadAndExecute, Write"}
268435456 {$AccessMask = "FullControl (Sub Only)"}
default {$AccessMask = $DACL2.AccessMask}
}
$myObj1.Rights = $AccessMask
Clear-Variable AccessMask -ErrorAction SilentlyContinue
$sharepermissions += $myObj1
}
$sharepermissions |ft -AutoSize
$sharepermissions |Out-File AllShareServers.txt -Append
}
$Secutiypermissions =@()
$sharepermissions=@()
$printline
$printline |Out-File AllShareServers.txt -Append
}
}
*************************************************************************
Output would be in this format.
****************************************************************************
\\ServerName\Share folder Name
C:\\FTPMain\\Share folder Name
NTFSpermissions
Rights
---------------
------
BUILTIN\Administrators
FullControl
\CREATOR OWNER
FullControl
\
ReadAndExecute
NT AUTHORITY\SYSTEM
FullControl
Sharepermissions
Rights
----------------
------
Domain\Domain Admins
FullControl
Domain\Programmers
ReadAndExecute, Modify, Write
**********************************************************************************************************************************
