An anonymous reader writes: Our organization has a large network file storage system that uses NTFS. We have several thousand security groups in Active Directory. Our security process is split amongst various geographically separated help desks, each with various levels of authority. One group can set NTFS permissions, another can create groups, and a computer illiterate group orchestrates how groups are mapped to NTFS directories. I can't change this part, but I can make it work if our lower level of managers can see what groups have access to what folders.
I know that I can get Properties --> Security for each folder, but understanding the effects of putting Person 1 into Group X would be impossible to envision given the size of our network storage. I'm looking for a way to create a x-mas tree diagram of our file system, along with being able to light up the parts that are assigned access to a specific group. For example, it should be able to answer the question "What folders does Group X have Modify access to?"
I know that ICACLS does this, but it doesn't generate a visualized map. It also doesn't output structured data. If I could somehow expert all data into MS Access, I could probably create some kind of rudimentary GUI to navigate the folder structure.
I'd appreciate any advice.