Comparing ACL lists

[Craster]

I have something of a problem. I have a standard ACL dump for a particular directory tree on a Windows 2000 server. I need to check a number of other servers, dump the ACLs, and then compare them with the 'standard' dump. I have tried dumpsec, cacls, showacls and a number of others, and am having real trouble finding either a tool which will perform the comparisons for me, or a tool that will provide an easily parseable output so I can perform the comparisons myself. Does anyone have any suggestions? Thanks, Craster

[Lost User]

Try to check this post[^]. May be its topic is relate to you too.

[Craster]

Are you sure you linked the right post there? That reply is about memory dumps. Thanks for looking though!

[Lost User]

Craster wrote:

Are you sure you linked the right post there? That reply is about memory dumps.

I used the word "may be" in my previous post. I just give you some idea only and you should check it by yourself.

[S Douglas]

Craster wrote:

Does anyone have any suggestions?

If the ACL file is just a flat text file then have you tried a diff program? Something like WinDiff? WinDiff[^]

---

I'd love to help, but unfortunatley I have prior commitments monitoring the length of my grass. :Andrew Bleakley:

[Craster]

I can do a flat text compare, but unfortunately acl outputs are not effective permissions, they're literal. For example: Administrator: Full Control and Administrator: Full Control, Read are effectively identical, but plain text comparisons aren't intelligent enough to work that out.