02-04-2015 06:03 AM
Hi,
I've searched the forum and I'm not sure this is possible but I need a SQL Query (or equivalent) to show me who has access to which Archives. I know permissionsbrowser does the same thing but this is not practical for 3000 plus Archives.
Thanks for any help
Solved! Go to Solution.
02-04-2015 06:44 AM
Within SQL databases itself, you can find ussers who have *some* kind of access but you wouldn't be able to determine what access , as the permissions are encoded for both manual an automatic
And even then it returns SID's which you'd have to cross reference via AD, you could use a Linked AD server and query from there, BUT the queries fail if you end up with a SID that no longer exists in AD and so its not very robust
IF you had EV10 SP4+ you could use Get-EVArchive in powershell
02-04-2015 06:21 AM
You could see if this will help:
https://www-secure.symantec.com/connect/downloads/checking-non-standard-folder-permissions
02-04-2015 06:44 AM
Within SQL databases itself, you can find ussers who have *some* kind of access but you wouldn't be able to determine what access , as the permissions are encoded for both manual an automatic
And even then it returns SID's which you'd have to cross reference via AD, you could use a Linked AD server and query from there, BUT the queries fail if you end up with a SID that no longer exists in AD and so its not very robust
IF you had EV10 SP4+ you could use Get-EVArchive in powershell
02-04-2015 06:49 AM
Hi JesusWept,
That would be fine, we dont necessary need to know whether they are manual or auto just get the SID's of anyone who has some kind of access.
Thanks
02-05-2015 06:21 AM
Hi Paul,
Check the SQL script available present in following location,
https://www-secure.symantec.com/connect/articles/script-know-ad-permission-assigned-archivesfolders
Regards
Pradeep