Auditing Permissions and site owners

My boss sent me a todo which says that he needs the following:
For each 'site':
- Farm
- Site Collection
- Site Name
- Site URL
- Site Description
- Site Owner
- MANAGER or SUPERVISOR of Site Owner
- Size of site
We have hundreds and hundreds of sites, (maybe a thousand now?), and on each one the original owner of the site has full rights to manage the users in his/her site.  On some sites there are dozens of people in the (whateversitename_Owners) SP group.
 And to make this even more challenging some sites don't have any "Owners" group, they are just granted permissions individually.
We've also learned the hard way that the Request Access email link on the sites is woefully out of date.  A spot check on that reveals at least 1/3 or more of the email addresses go to users who are no longer with the company, (we've had SP for 8 years
or so).
Does anyone know of an inexpensive tool that I could purchase that might give us at least a good chunk of this data?  And one that might be able to output that data into some kind of format that we could use to write some kind of PS script to give us
the rest?  I'm not a PS person at all, so if anyone knows of script that could help us extract some of that data as well I'd love to hear about it.
Getting the Site Owner is going to be fun, and then getting that person's supervisor or manager from AD will be another fun task.  I assume there is some way to use a PS script to get that once we get an owner defined for each site, but I'm not familiar
with how to do that.
Any help or suggestions is greatly appreciated.
Ted
P.S.  The only good thing about this request is that now MAYBE the company's management will see fit to purchase some admin tool that would do that automagically.  
<o:p></o:p>

Try running this from PowerShell.
#Pulls site url, owner and secondary owner and writes out to output.txt
Get-SPSite -Limit ALL | Format-Table -Wrap -AutoSize -Property url,Owner,SecondaryContact,RequestAccessEmail | Out-String -Width 1000 | Out-File -FilePath SiteDetails.txt
#Pulls site url and request access email and writes out to output.txt
Get-SPSite -Limit ALL | Get-SPWeb -Limit ALL | Format-Table -Wrap -AutoSize -Property url,Owner,SecondaryContact,RequestAccessEmail | Out-String -Width 1000 | Out-File -FilePath SiteDetails.txt
Bistesh

Similar Messages

  • Is there a way for a site owner to copy a custom calendar that resides on a site on one site collection to a site on another site collection?

    A user contacted me about copying and moving information from an old site that is being retired to a new site.
    The most important info is the department calendar.
    I don't see a way to use the "Manage content and structure" functionality to copy or move a calendar from one site collection to another.
    And site owners do not generally have enough permissions to create templates into the gallery.
    Is this just not possible for him to do on his own?
    Thank you for your help!

    I gave up and created templates for the site owner and created the corresponding list for them on the new site.
    I was startled to discover that even though I said I wanted to include all content, the 4 columns that were of type "people picker" did not, for the most part, transfer.
    So the columns will have to be manually entered. But at least the rest of the effort is done.

  • Site Owner Unable to edit site permissions

    Hi,
    On one of our site, me and my colleague both are site owners, but only I can edit the site permissions not him.
    I'm an SCA. Does that make a difference? How can I troubleshoot this?
    Thank you !
    Regards,
    prajK

    Hello,
    Just to clarify are you trying to add/remove users for a group? Or give direct permission to a user?
    Site collection administrator has more permissions in general than a site owner. 
    Site collection administrators   These administrators have the Full Control permission level on all Web sites in a site collection. They have Full Control access
    to all site content in that site collection, even if they do not have explicit permissions on that site. They can audit all site content and receive any administrative message. A primary and a secondary site collection administrator can be specified during
    the creation of a site collection.
    Site owners   By default, members of the Owners group for a site have the Full Control permission level on that site. They can perform administrative tasks on
    the site, and on any list or library within that site. They receive e-mail notifications for events, such as the pending automatic deletion of inactive sites and requests for site access.
    The above information are taken from here:
    http://technet.microsoft.com/en-us/library/cc263291(v=office.15).aspx

  • What third party tools exist to show a user or groups permissions and access rights for an entire SharePoint 2010 site collection?

    Our admin crew has just inherited a 4 year old SharePoint site that was developed on SP 2007 and later migrated to SP 2010.  We are trying to determine which users and groups have access to the 150+ sub-sites of the site and at what permission levels.
    Research tells me SharePoint 2010 has no means to simply list out a user's permission levels over an entire site collection, but that it must be done at each sub-site, list & library that has permission inheritance broken to create a unique permissions
    object.
    Has anyone found a solution to this issue?  Without days of research at each sub-site, list & library, how would one more economically go about such an investigation of a user's permissions on an entire SharePoint 2010 site?

    Hello,
    There is no direct way to see user and group broken permission within a site collection. However you can write powershell script to get the permission. You can modify the below script based on your need and export result in CSV. You may also need to add
    code to iterate all subsites within site collection.
    http://social.technet.microsoft.com/wiki/contents/articles/14242.sharepoint-2010-export-all-unique-permissions-from-site-collection-using-powershell.aspx
    http://en.community.dell.com/techcenter/windows-management/b/weblog/archive/2012/09/25/sharepoint-security-reporting-using-powershell
    Codeplex tool is also available to check permission but it is not always fulfill business need. You may also look at this if it suits you.
    https://permissionsmanager.codeplex.com/ 
    Hope it could help
    Hemendra:Yesterday is just a memory,Tomorrow we may never see<br/> Please remember to mark the replies as answers if they help and unmark them if they provide no help

  • 2013 SP Site Collection and Farm Admin permissions and cannot access site

    I am Farm Admin and Site Collection admin on my 2013 SP server and CAN access Central Admin, but CANNOT open the site without being promted for user name and password.  When I enter the user name and password they are not accepted. 
    This is on my production server.  I have NO PROBLEMs with the staging server.  The 2 are set up exactly the same.
    Any suggestions? 

    Discussion
    Farm Administrators are not automatically able to access site collections.  They can however add themselves to the site collection administrators group.  Additional detail:
    Permissions for site collection administrators - scroll down to the
    SharePoint farm administrators section (midway down) and look for the
    Note.
    Resolution
    Add your farm administrators account to the site collection administrators group. You can do this two ways:
    Go: Central administration > Application Management > Site Collections > Change site collection administrators
    Go: [your site collection] > Site Settings > Users and Permissions > Site collection administrators.

  • Correct permissions and owner for restored Applications

    Hello everyone.
    I have re-installed some applications from a backup (those which don't require an installer) and some from a previous Time Machine backup of the same unit.
    So, to recap, a fresh installation of Snow Leopard, updated to 10.6.5 via Combo update and then re-installed and restored some applications.
    However, when checking in Terminal, I now find a mixture of permissions and owner settings, like some applications are owned by root:wheel, some by root:admin and some other by username:admin.
    All seem to be chmod'd as 755.
    I have run a Permission Repair from Disk Utility, but this still has left the owner of Applications as just described above.
    I have tried to search here but I couldn't find anything or perhaps I didn't input the right search string.
    Which settings would you recommend?
    I'd appreciate your help and/or any link that could clarify this.
    Thank you.

    There is no single set of permissions right for every app. Owner, Group, & Other permissions will vary depending on how they are installed, by whom, & the level of system & user access they require.
    If you are not having any issues running the apps, I suggest that you leave things as they are. If you are, it would help a lot if you listed the apps giving you problems, & what those problems are. Also let us know if you have multiple user accounts, more than one admin account, & so on.

  • Site owner unable to save template

    Hello,
    I have a user that is in a site owner SP group with FULL CONTROL perms. As a member of this group he was able to, until recently, change then save sites as a template for later use. Now when he tries to save a site as a new template, it says access
    is denied and gives the option to sign in under a different account.
    I have removed then readded him to the group, but that did not solve the problem. In the same group I added my non-admin account and was able to save the template without fail.
    One note to make is that the SP admin account wasn't delegated for directory replication perms from the A.D. (an oversight in the setup of the farm). Before granting that perm to the SP admin account, some users were displayed as "domain\jdoe"
    and others with their display name "John Doe." There were also some cases where there were duplicate user profiles in SP. Since the replication perms were granted all names are displayed the same (as "John Doe") and the users that had duplication
    profiles now have just the single SP profile.
    My question is this; how do I go about allowing my site owner to save the new site templates? Or how would I troubleshoot the denial of his account perms when, according to the security group permissions check, he has the access required? Did the lack
    of replication permissions for the SP admin account have anything to do with this?
    If I missed something in describing my problem, please let me know.
    Thank you!

    @Jen:
    - No, there is only the single account in UserInfo related to his login ID / Email
    - There is only one column with a "1" (TRUE) setting and that is the tp_IsActive column. All others are NULL
    - Created new web app with same site collection (Team Site) in the same environment. Added the same end user to the owner group. He was able to save a template without fail.
    --Interesting development--
    After saving a new template in the new web app, the end user tried saving the sub-site (in the original problem) as a template - and it worked! Tried the same action again and it failed with the same result as before (your account is denied...). Further
    testing, trying to save a different sub-site as a template resulted in an error, but this time it gave a correlation ID to go from.
    Time
    Process
    Thread
    Category
    EventID
    Level
    Message
    02/22/2013   14:39:23
    w3wp.exe (0x1CA0)
    0x0D10
    Monitoring
    b4ly
    High
    Leaving   Monitored Scope (EnsureListItemsData#12). Execution Time=254.561124388714
    02/22/2013   14:39:23
    w3wp.exe (0x1CA0)
    0x0D10
    0x0
    iigj
    High
    Failed   to compile XML.
    02/22/2013   14:39:23
    w3wp.exe (0x1CA0)
    0x0D10
    General
    xxph
    High
    Failed   to get the Fields schema with 0x80004005
    02/22/2013   14:39:23
    w3wp.exe (0x1CA0)
    0x0D10
    General
    8kh7
    High
    Cannot   complete this action.  Please try   again.
    02/22/2013   14:39:23
    w3wp.exe (0x1CA0)
    0x0D10
    General
    ev0l
    Monitorable
    SPSolutionExporter: Microsoft.SharePoint.SPException: Cannot complete this action. 
    Please try again. --->   System.Runtime.InteropServices.COMException (0x80004005): Cannot complete   this action. 
    Please try again.     at   Microsoft.SharePoint.Library.SPRequestInternalClass.GetListItemDataWithCallback2(IListItemSqlClient   pSqlClient, String bstrUrl, String bstrListName, String bstrViewName, String  
    bstrViewXml, SAFEARRAYFLAGS fSafeArrayFlags, ISP2DSafeArrayWriter   pSACallback, ISPDataCallback pPagingCallback, ISPDataCallback   pPagingPrevCallback, ISPDataCallback pFilterLinkCallback, ISPDataCallback   pSchemaCallback, ISPDataCallback
    pRowCountCallback, Boolean&   pbMaximalView)    
    at   Microsoft.SharePoint.Library.SPRequest.GetListItemDataWithCallback2(IListItemSqlClient   pSqlClient, String bstrUrl, String bstrListName, String bstrViewName, String   bstrViewXml, SAFEARRAYFLAGS fSafeArrayFlags, ISP2DSafeArrayWriter
      pSACallback, ISPDataCallback pPagingCallback, ISPDataCallback   pPagingPrevCallback, ISPDataCallback pFilterLinkCallback, ISPDataCallback   pSchemaCallback, ISPDataCallback pRowCountCallback, Boolean&   pbMaximalView)    
    --- End of inner   exception stack trace ---    
    at   Microsoft.SharePoint.SPGlobal.HandleComException(COMException comEx)    
    at   Microsoft.SharePoint.Library.SPRequest.GetListItemDataWithCallback2(IListItemSqlClient   pSqlClient, String bstrUrl, String bstrListName, String bstrViewName, String   bstrViewXml, SAFEARRAYFLAGS fSafeArrayFlags, ISP2DSafeArrayWriter
      pSACallback, ISPDataCallback pPagingCallback, ISPDataCallback   pPagingPrevCallback, ISPDataCallback pFilterLinkCallback, ISPDataCallback   pSchemaCallback, ISPDataCallback pRowCountCallback, Boolean&   pbMaximalView)    
    at   Microsoft.SharePoint.SPListItemCollection.EnsureListItemsData()    
    at   Microsoft.SharePoint.SPListItemCollection.GetEnumerator()    
    at   Microsoft.SharePoint.SPFolder.InitializeCorrespondingItems(String[]   fields)    
    at   Microsoft.SharePoint.SPFile.get_Item()      
    at Microsoft.SharePoint.SPSolutionExporter.GetFileInfo(SPFile file,   String folderUrl, Boolean getFileListId)      
    at   Microsoft.SharePoint.SPSolutionExporter.GetFilesInFolderTree(SPFolder folder,   SortedList`2 filesInFolder, List`1 webViews)    
    at   Microsoft.SharePoint.SPSolutionExporter.GetFilesInFolderTree(SPFolder folder,   SortedList`2 filesInFolder, List`1 webViews)    
    at   Microsoft.SharePoint.SPSolutionExporter.GetFilesInFolderTree(SPFolder folder,   SortedList`2 filesInFolder, List`1 webViews)    
    at   Microsoft.SharePoint.SPSolutionExporter.GetFilesInWeb(String   workflowTemplateName)    
    at   Microsoft.SharePoint.SPSolutionExporter.GenerateSolutionFiles()    
    at   Microsoft.SharePoint.SPSolutionExporter.ExportWebAsSolution()
    02/22/2013   14:39:23
    w3wp.exe (0x1CA0)
    0x0D10
    Runtime
    tkau
    Unexpected
    System.Runtime.InteropServices.COMException:   Cannot complete this action. 
    Please   try again.    at   Microsoft.SharePoint.Library.SPRequestInternalClass.GetListItemDataWithCallback2(IListItemSqlClient   pSqlClient, String bstrUrl, String bstrListName, String bstrViewName, String
      bstrViewXml, SAFEARRAYFLAGS fSafeArrayFlags, ISP2DSafeArrayWriter   pSACallback, ISPDataCallback pPagingCallback, ISPDataCallback   pPagingPrevCallback, ISPDataCallback pFilterLinkCallback, ISPDataCallback   pSchemaCallback, ISPDataCallback
    pRowCountCallback, Boolean&   pbMaximalView)    
    at   Microsoft.SharePoint.Library.SPRequest.GetListItemDataWithCallback2(IListItemSqlClient   pSqlClient, String bstrUrl, String bstrListName, String bstrViewName, String   bstrViewXml, SAFEARRAYFLAGS fSafeArrayFlags, ISP2DSafeArrayWriter
      pSACallback, ISPDataCallback pPagingCallback, ISPDataCallback   pPagingPrevCallback, ISPDataCallback pFilterLinkCallback, ISPDataCallback   pSchemaCallback, ISPDataCallback pRowCountCallback, Boolean&   pbMaximalView)
    02/22/2013   14:39:23
    w3wp.exe (0x1CA0)
    0x0D10
    Monitoring
    b4ly
    High
    Leaving   Monitored Scope (Request   (POST:https://<REMOVED_URL>).   Execution Time=11517.2361291728

  • Why do we need to set site owner of a site collection?

    Hi All,
     why
    do we need to set site owner of a site collection?
    Thanks,
    Mohakk

    Hi Mohakk,
    Thanks for posting your issue, Kindly find the required details below
    The System Owner is responsible for the availability, and support and maintenance of a system and for the security of data residing on that system. The system owner is responsible for the availability, and support and maintenance, of a system and for the
    security of the data residing on that system. The system owner is responsible for ensuring that the computerized system is supported and maintained in accordance with applicable SOPs. The system owner also may be the process owner.
    The System Owner acts on behalf of the users. A System Owner may:
    Approval of key documentation as defined by plans and SOPs
    Ensuring that Standard Operating Procedures (SOPs) required for maintenance of the system exist and are followed
    Ensuring adequate training for maintenance and support staff
    Ensuring changes are managed
    Ensuring the availability of information for the system inventory and configuration management
    Providing adequate resources (personnel including SMEs, and financial resources) to support the system
    Reviewing audit reports, responding to findings, and taking appropriate actions to ensure compliance
    Coordinating input from other groups (e.g., finance, information security, safety, legal)
    Also, you can attend online learning course on below mentioned URL
    https://www.microsoft.com/learning/en-us/course.aspx?id=55035a
    I hope this is helpful to you, mark it as Helpful.
    If this works, Please mark it as Answered.
    Regards,
    Dharmendra Singh (MCPD-EA | MCTS)
    Blog : http://sharepoint-community.net/profile/DharmendraSingh

  • Site Owners not able to upload files in only one library

    Although my colleagues are site owners, they cannot upload files in one specific library (other libraries they can).
    What might be this problem. Has anyone encountered it? Please help.
    Regards

    Thank you.
    I checked and it had unique permissions set on the library. I gave access to the two users access separately and it worked.

  • Project Server 2013 Site Owner not changed when Project owner is changed

    It seems when a project is created the project site "owner" is set to be the person that created the project. If the project owner is changed then site "Owner" is not updated.  This is a problem on several fronts and I am almost
    hoping it is an issue with my install.(We are running Project permissions mode)
    Use Case 1: A project manager leaves the company and the New PM is added as the new project owner. After addition and publish the site owner remains the same as the original. this means the new pm can't share the site (to a stakeholder who is not in the
    ERP) by adding them to the general "Contribute" group or otherwise.
    Use Case 2: a planner creates a portfolio project and gets it through the workflow and all. the PM is assigned but can't add other stakeholders without going back to the planner and having them add them to the project site as an owner. 
    Question: Is this a feature or a bug? Is there a script to do this? 
    Seems kind of cumbersome and has already produced numerous issues for us. 
    Tasks

    Bob,
    Unfortunately, you are seeing the behavior as designed. The Project Site Owner will always be the person, who created the project site (i.e. Project). This is because, after the initial creation, the only groups that are synced are:
    <Site Name> Project Managers (Project Web App Synchronized)
    <Site Name> Team Members (Project Web App Synchronized)
     <Site Name> Web Administrators (Project Web App Synchronized)
    The idea here is that, all 'sharing' of the project site will happen via the project schedule/Project Server. Anybody who is part of the Project team, will be given Team member access, and anybody with rights to save that project will be given project manager
    acess on the Project site,
    This is also good in a way, because, this prevents any license violations, (users who access project sites also should have PWA CAL), that could happen via direct sharing.
    Having said that, you have couple of options:
    1) Make it part of your process that when a owner changes, the admin (or workflow) manually adds the new owner to the Site Owners group.
    2) Disable Project Site Sync, and manage it via the AD Groups (depending upon on your security model).
    Cheers,
    Prasanna Adavi, Project MVP
    Blog:
      Podcast:
       Twitter:   
    LinkedIn:
      

  • I have a user who has permissions on site A B C 's some libraries. How can I get a list for all the contents the user have permission for?

    The user has permissions on site A B, and C. within the sites, the user has permissions on some lists/libraries.
    how can i retrieve an entire list to see what the user has permissions on?
    thank you 
    I might be a newbie in some area. But I'm working hard. :)

    You can get the report using powershell, please check below posts
    http://social.technet.microsoft.com/Forums/sharepoint/en-US/5a3252bf-cb03-4488-9a0d-f4e0ce07d497/user-permissionsaccess-report-in-sharepoint-site
    http://reality-tech.com/2011/12/30/reporting-on-all-user-permissions-in-a-web-application/
    My Blog- http://www.sharepoint-journey.com|
    If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

  • A mess with account, administrator PW,  permissions and privileges!

    I don't know where to start. I've tried a number of the suggestions in the other posts below, but just can't get into my HD1. I inadvertently deleted some folders from Library (but did put them back). I thought they were doubles.
    I re-booted from my Snow Leopard install DVD (hold down C). I have tried a number of times to choose a new password. But, each time I can Log-in, but notice that I can't get into my Administration PW. Now, which one do I use? The one when I installed Leopard 2~3 years ago? (That one I forgot). Or one of the few that I just created?
    Anyway, I live just outside of Tokyo, Japan and called the Apple Store in Tokyo (got an English speaker) and he directed me through the steps. But, he said to choose System Administration (root) which I did. Later I realized that shouldn't have been done from the article that he had sent me. I followed his steps, could log in and then noticed that I could use Mail (if I filled in my Mail PW etc.) but my clock couldn't be authenticated as I tried to set the time. It's on L.A. time. (but in Tokyo).
    So, next that didn't work and he e-mailed me the Apple site Help articles on re-setting the accounts. I tried a few more times and still couldn't access to authenticate. So, I re-installed my Snow Leopard disk. 10.6...
    I went to the Apple Support site and downloaded the Snow Leopard up-dates.... I've tried to install the up-dates of Snow Leopard 10.6.6 and that couldn't be authenticated either and it said I need 10.6.5 tried that and the same thing all the way down to 10.6.2 and still none of them could be installed either. Now, iTunes can't be accessed. and I just tried to install the newest Skype and that also can't be installed. (all on HD1 in applications) and my printer also... I can get online with Safari and Firefox O.K.
    I also tried to use Disk Utility and verify disk/repair disk but get, "insufficient privileges"! and can not verify permissions. The time set can't be done. I click on the Lock it shows "authenticate" for a second and stays locked...
    The Snow Leopard up-date 10.6.6 shows this....
    Even though SL 10.6.6 is installed, it keeps going back to Mac OS X (10.6.1) below....
    I wanted to post a screen shot here, but don't know how....it couldn't be copied.
    PLease...let me know...thank you
    What can I do from here? Anyone out there able to help me! thanks. I am NOT a computer wiz and not really into any type of "Terminal" lingo to understand what I'd do.

    ok, that's not normal then. then you are right and some permissions are seriously messed up. before we proceed a couple of questions. are you logged in as the user Savannah when you are experiencing these problems? were you trying to change permissions on the Mail folder while logged in as Savannah or as some other user. you should do it while logged in as Savannah. other users shouldn't have permissions to the Mail folder of user Savannah.
    if you are doing this while logged in as Savannah I suggest resetting permissions and ACLs on Savannah's whole home directory. this is much easier if that user is admin so give it admin rights temporarily in system preferences->accounts. you can remove admin rights from that user later, once we fix everything. after you've made that user admin log in as Savannah and run the following terminal commands (copy and paste please)
    sudo chflags -R 0 ~
    you'll have to enter the password of user savannah after that command. it will not be echoed on the screen. that's normal.
    Next enter
    sudo chown -R `id -un`:`id -gn` ~
    and then
    chmod -RN ~
    next, boot from the leopard install DVD and reset ACLs on Savannah's home directory as described here
    http://support.apple.com/kb/TS1334?viewlocale=en_US
    after that log in as savannah again and run
    sudo chgrp -R `id -gn` ~
    then try using Mail again. it should hopefully work now.

  • Mac won't update software or access iTunes shop. Message comes up with 'not connected to the net. Check connections' error. I still have internet access. Changed my Apple ID but no result. Repaired permissions and re-installed operating system.

    Mac won't update software or access iTunes shop. Message comes up with 'not connected to the net. Check connections' error. I still have internet access. Changed my Apple ID but no result. Repaired permissions and re-installed operating system.

    It sounds like you may have multiple problems, but none of them are likely to be caused by malware.
    First, the internet-related issues may be related to adware or a network compromise. I tend to lean more towards the latter, based on your description of the problem. See:
    http://www.adwaremedic.com/kb/baddns.php
    http://www.adwaremedic.com/kb/hackedrouter.php
    If investigation shows that this is not a network-specific issue, then it's probably adware. See my Adware Removal Guide for help finding and removing it. Note that you mention AdBlock as if it should have prevented this, but it's important to understand that ad blockers do not protect you against adware in any way. Neither would any kind of anti-virus software, which often doesn't detect adware.
    As for the other issues, it sounds like you've got some serious corruption. I would be inclined to say it sounds like a failing drive, except it sounds like you just got it replaced. How did you get all your files back after the new drive was installed?
    (Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

  • Task or script to monitor file ownership, permissions and change as needed

    I'm using a Mac OS X Tiger (10.4.9) computer as a file server for a group of people who are (1) individually non-administrative users and (2) members of Groups. The hard drive is partitioned into 2 volumes: Vol1 has no non-admin access, Vol2 has a Shared folder containing folders with files intended for either Public or Private access. I'm admin with UID=501 and trying not to be a danger. Each other user has a unique UID. Each Group has a unique GID. The folder that all users have access to is named Pub_shares. Every user allowed to access Pub_shares is a member of PubGroup (GID=505).
    Now when a user accesses a file nested in Pub_shares, that file usually becomes owned by that user and the group membership may change from PubGroup and may undergo a change to "Read only" or "No Access." Since all members of PubGroup should have Read & Write access to files in Pub_shares, this is a problem. All files in Pub_shares, regardless of who last touched them, should remain:
    Owner = chris / Access Read & Write
    Group = PubGroup / Access Read & Write
    Others = No Access
    I've read some about Ownership & Permissions. I've seen it suggested that an admin set up an automated task, say to run every 3 minutes; that task checks file ownership and permissions and, if different, changes the values recursively to those shown above, such that:
    Owner = 501 / Access = rwx
    Group = 505 / Access = rwx
    What do I need here? An Automator workflow? A shell script? AppleScript? Cron? launchd? How do I put this together? I don't know the syntax or the expressions to use. Any help is much much appreciated. [Note again: My "server" runs Tiger 10.4.9.] Thanks.

    ..."I have some Windows users (trying) to access shared files. Will the afp inheritance options stand up to a Windows user?"...
    No the afp inherit settings won't apply to windows sharing, but I think there are equivalent settings that can be applied to smb.
    ..."I thought, too, I'd read somewhere that inheritance options use the topmost volume folder to set inheritance patterns."...
    I am not able to double-check this for Tiger, but I don't think that is the case. As far as I know, with those settings enabled (and it doesn't work reliably if only one is enabled) permissions and ownership should be inherited from the folder that the items are added to.
    ..."My topmost folder on vol2 is "Shared" but it contains both Pub_shares (accessible by members of PubGroup) and a few Private_shares (folders accessible by members of various private groups)."...
    Sorry I missed that point in your earlier post. The above would cause complications if a user were to move items from the private area to the public area. The inheritance only applies to when files are created, so something moved from the private area to the public area would retain its original permissions. To make it work, the public and private areas would have to be set up as separate shares, rather sharing the whole volume.

  • SharePoint Hosted App to Read members of Site owner group, if "Who can view the membership of the group? " is set to Group members only

    Hi,
    Is there a way to read group members of site owner group via SharePoint hosted app . The "Who can view the membership of the group? " is set to Group members only. As per my research SCA can only view the group members of site owner group
    if this settings is applied.
    Thanks,
    Sudhir
    Sudhir rawat

    See this.
    Avoid changing the MaxPageSize LDAP query policy
    http://jeftek.com/219/avoid-changing-the-maxpagesize-ldap-query-policy/
    Regards~Biswajit
    Disclaimer: This posting is provided & with no warranties or guarantees and confers no rights.
    MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin
    MY BLOG
    Domain Controllers inventory-Quest Powershell
    Generate Report for Bulk Servers-LastBootUpTime,SerialNumber,InstallDate
    Generate a Report for installed Hotfix for Bulk Servers

Maybe you are looking for

  • XSLT Mapper problem

    Hi gurus, I am facing a peculiar problem with my transformation mapper. I am trying to map my source database(AS400) to the destination database(Oracle) by using DB Adapter. My source table column names contain $ signs like P$id,P$name Now when I am

  • Setting default values for item in opportunity mgmt(crmd_bus2000111)

    Hi All, I need to set default values for the field Fiscal Quarter in item level using BADI CRM_CUSTOMER_I_BADI .This Field is created using EEW. The default value is like if the date is nov-2007 the value for this fiscal period is FQ4-2007 . Any clue

  • Is DBMS_CRYPTO FIPS 140-2 certified?

    Sadly, I think that the answer is no. I am hoping someone more knowledgeable can contradict me. This link describes the Oracle Database FIPS certification status. http://www.oracle.com/technology/deploy/security/seceval/oracle-fips140-validations.htm

  • Trigger too Large

    Hi! friends I got a problem on my trigger. I use trigger to solve working flow control. Today,I have a problem,My Trigger program body is too large cause pls-00123 error. I look for solution on document. It said to modualize my trigger. But How to us

  • Still having problem with downloading to excel two ITs

    Three things I have to do are: - to have leading zeros in excel - (wich I solved with DBF filetype - >> is there any other way ?) , - to append two internal tables one after another (to have them in one excel sheet), (did it calling two times FM ) -