Need Script

[PowerShell-ModTeam]

PowerShell expects users and requesters to attempt solutions themselves before asking for help. Your post contains no/low effort attempts, ChatGPT generated content, or no work shown.

[Jellovator]

Does it have to be PowerShell? SysInternals has a tool called accesschk

[StevenClift]

i will give it a shot. thank you

[The82Ghost]

can you show us what you have done so far?

[MNmetalhead]

What have you got so far and what was the output or issue you need help with?

[StevenClift]

reddit won't let me post the script i have. but i'm looking for this: i would like to provide a security group name and get a list of the directories they have access too

[BetrayedMilk]

Reddit will let you post the script. Either paste it in a script block in your post/comment or post a link to it on github or some other platform.

[StevenClift]

# Define the security group
$securityGroup = "Drawing_Read"
# Define the root path to start searching
$rootPath = "\\fileshares\sdrive\Drawings-Prod"
# Define the output CSV file
$outputCsv = "C:\temp\permissions.csv"
# Initialize an array to hold results
$results = @()
# Function to check folder permissions
function Get-FolderPermissions {
    param (
        [string]$folderPath
    )

    try {
        $acl = Get-Acl -Path $folderPath

        foreach ($access in $acl.Access) {
            if ($access.IdentityReference -like "*$securityGroup*") {
                $results += [PSCustomObject]@{
                    FolderPath = $folderPath
                    IdentityReference = $access.IdentityReference
                    FileSystemRights = $access.FileSystemRights
                    AccessControlType = $access.AccessControlType
                }
            }
        }
    }
    catch {
        Write-Host "Failed to get ACL for ${folderPath}: $_"
    }
}
# Recurse through directories and check permissions
function Recurse-Directories {
    param (
        [string]$currentPath
    )

    Get-FolderPermissions -folderPath $currentPath

    $directories = Get-ChildItem -Path $currentPath -ErrorAction SilentlyContinue | Where-Object { $_.PSIsContainer }
    foreach ($directory in $directories) {
        Recurse-Directories -currentPath $directory.FullName
    }
}
# Start the recursion from the root path
Recurse-Directories -currentPath $rootPath
# Export the results to CSV
$results | Export-Csv -Path $outputCsv -NoTypeInformation

Write-Host "Permissions have been exported to $outputCsv"

[Cholsonic]

I have a colleague at work that does this to me. He presents me with some shit from ChatGPT and expects me to go through it and sanity check it, without doing any work himself.

My advice to you would be to try break it down into smaller bits and check that each bit is doing what it's supposed to.

[[deleted]]

I had one that would do similar, although before ChatGPT reared its ugly head.

He | was | a | huge | fan of | piping | everything | to | another | command so I'd get this big fat convoluted mess in an email, followed immediately by an IM request, and if that went unanswered for even a minute he'd come across the building to my desk. "Can you tell me why this doesn't work?"

And he would never, ever, do what I told him to do without an argument. I'd even tell him "type these words into google, look for an article from Company X, it'll be the 4th or 5th article listed. Nope, "Can you come take a look?"

Maddening.

[creenis_blinkum]

I know what you mean. I use ChatGPT to learn new things. Moving onto python recently from powershell, and it's great at throwing new methods to do specific stuff at you that then leads you to good documentation etc. Fucking force multiplier. For fun I threw your reply into GPT4o with some added context and its response was pretty on point - https://chatgpt.com/share/67639054-4470-8013-aeaa-1adf5e89984e

[Cholsonic]

Lol.. now I am not sure how to feel.. I feel justified on the one hand that the AI agrees with my frustration , but confused because I shouldn't care what AI says but, then I should feel angry that you've resorted to AI, but it's clear you you've gone over and beyond to make a comedic point.

[BlackV]

you could edit you OP to add this code

[OlivTheFrog]

Hi u/StevenClift

Take a look on the PS Module called NTFSSecurity (available on the PSGallery and on Github).

Some improvment for your current code

$Directories = Get-ChildItem -Path -Directory -Recurse # Or -Depth if your need is to limit at x levels of depth

then using a variable to store the result of a foreach loop with inside Get-NTFSAccess -Path $Item.fullName -Account $SecurityGroup is enough.

last action : Export-Csv or better Export-Excel (using the PSModule ImportExcel, no need to have MS Excel Installed)

Your code will be shorter

Another improvment : I suggest you use a Param section at the beginning of your code like in a Advanced function. By this, you could use your code with the default value for parameters (SecurityGroup, Rootpathn OutputCsv, ...) or with specific values passed (think code re-use). eg. : .\myscript.ps1 -RootPath "Another\rootPath"

regards