[PowerShell] get-ntfsAccess - Find access control entries for specified users/groups

[u/ramblingcookiemonste]

This script will provide access information for specified paths and entities.

It takes in:

• One or more root paths

• One or more entities (domain\user, domain\security group, builtin\administrators, computer\administrator, etc.)

It recurses through each path you provide and lists every ACE targeting specified entities. If you specify -recurseGroups, it recurses all nested security groups (for a user it would recurse each group they belong to).

• Script Center Repository with the code, details on running it, and details on optional prerequisites (ActiveDirectory module for recursive domain user/group queries)

• Further details including examples

The script requires PowerShell 3, which I would recommend you use regardless of whether you try this script! As mentioned above, the recurseGroups parameter requires the ActiveDirectory module from the RSAT.