I have a security mystery :) Effective permissions tab shows that a few sampled users (IT ops) have any and all rights (all boxes are ticked). The permissions show that Local Administrators group has full access and some business users have too of which the sampled users are not members of.
Summary: How can I automatically (script) check all the permissions for files and folders on a drive, and if a permission is tied to a local computer account have a new permission added: with a Domain Account with the same permissions.
I inherited a Windows 2008 file server that has many files and folders with Builtin (local) permissions like:
bootex.log was (I suppose) created a while ago after running chkdsk. I tried to read it, but was given the message "Access denied". I opened its properties to check permissions, and in the security tab in the lower pane, for all the groups listed, including SYSTEM, no boxes (at all) are checked.