Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
August 9, 2006
Download Accesschk.zip freeware to check an accounts access to file system objects, registry keys, or services.
After unzipping the file and placing Accesschk.exe in a folder that is in your path, typing accesschk /? returns:
AccessChk v2.0 - Check account access of files, registry keys or servicesCopyright (C) 2006 Mark RussinovichSysinternals - www.sysinternals.comusage: accesschk [-s][-i|-e][-r][-w][-n][-v][-d [username] -c Name is a Windows Service e.g. ssdpsrv (specify '*' as the name to show all services) -d Only process directories -e Only show exlicitly set Integrity Levels (Windows Vista only) -i Show object Integrity Level (Windows Vista only) -k Name is a Registry key e.g. hklmsoftware -n Show only objects that have no access -q Omit banner -r Show only objects that have read access -s Recurse -v Verbose (includes Windows Vista Integrity Level) -w Show only objects that have write accessIf you specify a user or group name and AccessChk will report the effectivepermissions for that account; otherwise it will dump the security descriptor.By default the path name is interpreted as a file system path. For each objectAccessChk prints R if the account has read access, W for write accessand nothing if it has neither. The -v switch has AccessChk dump thespecific accesses granted to an account.ExamplesThe following command reports the accesses that the Power Users account has to files and directories in WindowsSystem32:accesschk "power users" c:windowssystem32This command shows which Windows services members of the Users group have write access to:accesschk users -cw * To see what Registry keys under HKLMCurrentUser a specific account has no access to:accesschk -kns austinmruss hklmsoftwareTo see the security on the HKLMSoftware key:accesschk -k hklmsoftwareTo see all files under UsersMark on Vista that have an explicit integrity level:accesschk -e -s c:usersmark
You May Also Like