How to check effective permissionswith DataSecurity Plus

To ensure that your sensitive data is protected against unauthorized access or tampering, your organization needs visibility into file permissions. You can achieve this by scrutinizing access controls periodically and removing undue permissions, ultimately reducing the potential points of attack. This approach not only resolves the issue of excessive permissions and fosters effective resource management, but is also required by compliance regulations.

Steps to find effective permissions using DataSecurity Plus:

1. Download DataSecurity Plus and configure the File Analysis module. Go to the On-Demand Reports tab and click Effective permissions.
2. On the Effective Permissions page, click the + icon next to Server Name and select the desired server.

3. Click the + icon next to the AD Objects field and select the desired AD Objects, such as users, groups, or well-known SIDs, that you want to assess effective permissions for.

4. Click the + icon next to the Folders field and select the objects that you want to analyse the effective permissions for either by selecting the shares from the Available Shares tab or adding the path of the local folder in the Add Folder Path tab.
5. Select the subfolder level based on how many nested folders you want to analyze in the specified path.
6. Choose whether you want to scan Files only, Folders only, or Files and Folders. You can also choose not to scan AD Objects with No Rights .
7. Click Generate Report.

You will be able to view the effective permissions of users to the selected files and folders.

Note: 'Read' permission is required by the Local System Account for files and folders to be scanned.

Why you should adopt DataSecurity Plus, a simpler alternative to using native effective permissions analysis features

Managing effective permissions for AD objects manually via Windows native tools can be cumbersome since it involves manually inspecting each file and folder's permissions. With DataSecurity Plus, effective permissions can be analyzed precisely for all AD objects with just a few clicks. You can gain comprehensive insights into user, group, and well-known SID permissions and effortlessly analyze them from a unified console.

Download now for a 30-day, free trial.