This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enumeration of Directly-assigned Domain Users Causing Report to Take a Long Time as well as being Very Large

The NTFS Folder Permission with Membership report is taking an excessive amount of time to load or is failing.  The 'Domain Users' group is being fully enumerated/listed for each folder/file which is resulting in 5000 plus page reports.  I need a method of conditionally/selectively choosing which groups to NOT enumerate/expand in nested groups, etc.

Parents
  • Hi Naureen,

    Here are the responses to your previous questions. Let me know if you need any additional information.


    Question: Can you please confirm if this parameter will hide mentioned accounts even if directly permissioned, or only when nested within another group?

    Answer:

    We need the to be able to hide the referenced accounts/groups whether directly permissioned or nested within another group.



    Question: Can you please also confirm what other parameters are you looking to include in the report?

    Answer:

    Basically I need the same parameters that are in the default “Folder Permissions with Membership” report with an additional parameter to exclude certain users/group from even being displayed. In addition, the ability to prevent the “Domain Users” group from being expanded whether directly permissioned or nested. All other groups can be expanded as they contain significantly less users than ‘Domain Users’.

    Here is a sample of the parameters included in the report including the ‘exclude’ parameter for certain users/groups.


    NTFS: Is Folder (NTFS) – Hidden parameter
    Computer: Computer Name (Computer) – Include the following computers:
    NTFS: Path (NTFS) – Include the following paths:
    NTFS: Path (NTFS) – Exclude the following paths:
    ACE: Is Inherited (ACE) – Do you want to show inherited permissions only?
    Account: Account Name (Account) – Include the following accounts:
    Account Member: Expand Direct or Nested groups – Add option to “Expand inline excluding members of Domain Users group whether direct or nested”

    Account: Account Name (Account) – Exclude the following accounts:
    (this is the parameter that excludes specified users/groups from even being displayed in the permission report)


    Thanks,
    Dan Sorenson
Reply
  • Hi Naureen,

    Here are the responses to your previous questions. Let me know if you need any additional information.


    Question: Can you please confirm if this parameter will hide mentioned accounts even if directly permissioned, or only when nested within another group?

    Answer:

    We need the to be able to hide the referenced accounts/groups whether directly permissioned or nested within another group.



    Question: Can you please also confirm what other parameters are you looking to include in the report?

    Answer:

    Basically I need the same parameters that are in the default “Folder Permissions with Membership” report with an additional parameter to exclude certain users/group from even being displayed. In addition, the ability to prevent the “Domain Users” group from being expanded whether directly permissioned or nested. All other groups can be expanded as they contain significantly less users than ‘Domain Users’.

    Here is a sample of the parameters included in the report including the ‘exclude’ parameter for certain users/groups.


    NTFS: Is Folder (NTFS) – Hidden parameter
    Computer: Computer Name (Computer) – Include the following computers:
    NTFS: Path (NTFS) – Include the following paths:
    NTFS: Path (NTFS) – Exclude the following paths:
    ACE: Is Inherited (ACE) – Do you want to show inherited permissions only?
    Account: Account Name (Account) – Include the following accounts:
    Account Member: Expand Direct or Nested groups – Add option to “Expand inline excluding members of Domain Users group whether direct or nested”

    Account: Account Name (Account) – Exclude the following accounts:
    (this is the parameter that excludes specified users/groups from even being displayed in the permission report)


    Thanks,
    Dan Sorenson
Children
No Data