This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enumeration of Directly-assigned Domain Users Causing Report to Take a Long Time as well as being Very Large

The NTFS Folder Permission with Membership report is taking an excessive amount of time to load or is failing.  The 'Domain Users' group is being fully enumerated/listed for each folder/file which is resulting in 5000 plus page reports.  I need a method of conditionally/selectively choosing which groups to NOT enumerate/expand in nested groups, etc.

Parents
  • Hi Daniel,

    The base “Folder Permissions with Membership” Report cannot be modified to incorporate all the requirements that you want. The Expand Nested Groups parameters for any report cannot be changed to exclude more groups than Domain Users. As well, with this report, it is not possible to add a filter on the nested accounts to hide specific accounts from the output. Due to these limitations, we need to create a new custom query report which does what is required.

    The last report which I uploaded will automatically expand all groups recursively but allows you to specify which groups to not expand (parameter: "Exclude the following groups"). The report also applies the expansion logic to the direct members instead of the nested members.

     

    For example: Suppose User1 and User3 are the members of Group1
                                     Group2 has User2, User4, and User5 as members
                                     \\Domain\Folder1 is permissioned to user1, user2, Group1, and Group2

    If we exclude group1 from expansion, the uploaded report will show data without expanding group1 like:

    Path: \\Domain\Folder1
           User1
           User2
           Group1
           Group2
           User4
           User5

     

    However, the uploaded report does not have a parameter for excluding specific accounts from being displayed which I will add. Can you please confirm if this parameter will hide mentioned accounts even if directly permissioned, or only when nested within another group?

    With a custom query report, the folder selection dialog will not be the same as the base report but you can specify any path with wildcards in the available parameter, for example, \\computer\share\*, or \\computer\c$\folder\*, depending on the collection options.
    Can you please also confirm what other parameters are you looking to include in the report?

    Thanks
    Naureen

Reply
  • Hi Daniel,

    The base “Folder Permissions with Membership” Report cannot be modified to incorporate all the requirements that you want. The Expand Nested Groups parameters for any report cannot be changed to exclude more groups than Domain Users. As well, with this report, it is not possible to add a filter on the nested accounts to hide specific accounts from the output. Due to these limitations, we need to create a new custom query report which does what is required.

    The last report which I uploaded will automatically expand all groups recursively but allows you to specify which groups to not expand (parameter: "Exclude the following groups"). The report also applies the expansion logic to the direct members instead of the nested members.

     

    For example: Suppose User1 and User3 are the members of Group1
                                     Group2 has User2, User4, and User5 as members
                                     \\Domain\Folder1 is permissioned to user1, user2, Group1, and Group2

    If we exclude group1 from expansion, the uploaded report will show data without expanding group1 like:

    Path: \\Domain\Folder1
           User1
           User2
           Group1
           Group2
           User4
           User5

     

    However, the uploaded report does not have a parameter for excluding specific accounts from being displayed which I will add. Can you please confirm if this parameter will hide mentioned accounts even if directly permissioned, or only when nested within another group?

    With a custom query report, the folder selection dialog will not be the same as the base report but you can specify any path with wildcards in the available parameter, for example, \\computer\share\*, or \\computer\c$\folder\*, depending on the collection options.
    Can you please also confirm what other parameters are you looking to include in the report?

    Thanks
    Naureen

Children
No Data