(v2.4) Somar DumpAcl - NT permissions acls Windows NT program to dump file system and other types of permissions, audit settings, user/group info, etc. in a concise, readable listbox format, so that "holes" in system security are readily apparent. V2.4 adds many enhancements and some bug fixes. Shareware (US$69). By Somar Software, http: //www.somar.com, 72202,2574@compuserve.com ------------------------------------------- Overview Somar (tm) DumpAcl (tm) is a Windows NT program that will dump the permissions and audit settings for the file system, registry and printers in a consise, readable listbox format, so that "holes" in system security are readily apparent. Somar DumpAcl also dumps user/group info. Somar DumpAcl is a must-have product for Windows NT systems administrators. Windows NT contains the mechanisms for providing strong system security, using permissions to control access to objects and auditing to log access. However, it can be very difficult to determine if all permissions and audit settings have been set correctly, since there are so many files and registry keys on the typical system. The situation is analogous to having a building with unbreakable locks on each of 10,000 doors. The problem is not with the locks themselves, but rather with one person walking around and checking that none of the 10,000 doors is unlocked. Somar DumpAcl provides a solution to the problem of too many files and registry keys to check on a regular basis, by producing a consise and readable report of permissions and/or audit settings. By reviewing this report, you can determine if users have more access than you want to allow. You can then use file manager, registry editor or print manager to set permissions and audit settings differently. Copyright/License/Registration Somar DumpAcl is Copyright © 1994-1995 Somar Software. Send problem reports and comments to 72202.2574@compuserve.com. More information about Somar Software and this product is available via the WWW at http://www.somar.com. Somar DumpAcl is Shareware. You may try it for a period of 21 days. After this trial period, you must pay a either register and pay for the software, or delete it from your computer. See the Somar DumpAcl online help for complete license and registration details. Installation Place DUMPACL.EXE and DUMPACL.HLP together in any directory. The first time DUMPACL.EXE is run, it will create some registry entries. These registry changes are described in DUMPACL.HLP. Somar DumpAcl does not make any other changes to your system. Complete uninstallation instructions are contained in DUMPACL.HLP. Changes in V2.4 Add option to Scan all logon servers for latest logon time. Add LogonServer field to users report. Speed up processing of users/groups reports. Code accepted "txt" while help file correctly specified "fixed" as batch option. Add Group comment to users/groups reports. Dialog for Group by Columns. Option to not group directories. Fix bug with dumping permissions for remote registries. Add filter option. Changes in V2.3 Add Save As'Native format and Load Native options. Add batch command line options. Support Unicode. Add Policies and Services reports. Changes in V2.2 Add Edit'Find option. Can save as comma separated, tab separated or fixed width columns. Add HomeDrive to Users report. Documentation improvements. Changes in V2.1 Add GroupType and LogonHours to Users report. Make Dump Users easier to use. Documentation improvements. Fix bugs with remote access. Changes in V2.0 Added: Dump printer permissions, dump share permissions, dump audit settings, dump users, options for permissions dump. Do not force display of parent directory when file is shown. Acquire Backup privilege to allow showing permissions for all directories. Better error checking. Group items with same permissions but different owners, if both owners also have full control. Changes in V1.2 Add Show All option to View menu. Changes in V1.1 Fix bug in where grouping by file extensions incorrect in case where some but not all files in directory with same extension have same permissions as directory.