Getting permissions of a remote SMB/CIFS share without remote powershell or WMI
I'm looking for a way to export the ACL of a SMB / CIFS share (not to be confused with the NTFS ACL) from a Windows machine connected to the share. So far, I can see the permissions in the advanced security properties of the share, but no way to export or parse them short of an AutoIT monstrosity.
I want to obtain this information in a format that I can parse, be it CSV, JSON, XML, etc.
I have checked this question which recommends using Powershell's Get-SmbShareAccess: Retrieving Remote File Share 'Share Permissions' Using Powershell and this TechNet question which uses Get-WmiObject: Get-wmiobject Win32_Share does not show Sharing Permissions but both assume we can get Powershell code executed on the server hosting the share: this isn't the case for me as the share is not hosted on windows and I don't have shell access to the machine.
I'm open to any language but would prefer Powershell if given the choice.
Windows explorer uses RPC via the win32 API method NetShareGetInfo(), but it's not easy to call it directly from Powershell.
FileShareUtils is a fantastic gallery module that does all of this for you, and the best option that I could find:
$share = Get-NetShare -Name 'MyShare' -Server 'MyFileServer01'
Server : MyServer01
Name : MyShare
Path : E:\Folder\Path
Description :
ABE : Enabled
CachingMode : Manual
ShareACLText : BUILTIN\Administrators|FullControl,Everyone|FullControl
CurrentUses : 4
ConcurrentUserLimit : -1
BranchCache : Disabled
Flags : 2051
Type : Disk Drive
ShareSDDL : D:(A;;FA;;;WD)(A;;FA;;;BA)
ShareACL : System.Security.AccessControl.DirectorySecurity
$share.ShareACL.Access
FileSystemRights : FullControl
AccessControlType : Allow
IdentityReference : Everyone
IsInherited : False
InheritanceFlags : None
PropagationFlags : None
FileSystemRights : FullControl
AccessControlType : Allow
IdentityReference : BUILTIN\Administrators
IsInherited : False
InheritanceFlags : None
PropagationFlags : None
I was not able to test whether the whole Get-NetShare works as a non-admin user, but if you can see the "Share" permissions in file explorer, then this should work for you. If do you still get access-denied messages, then you may be able to work your way through the module code and see where/why.
- PowerShell script to return versions of .NET Framework on a machine?
- PowerShell - cast a variable type based on a variable definition
- Assigning a Token Lifetime Policy to an application in Microsoft EntraID seems to have no effect
- Is there a PowerShell equivalent to the dir /w of the old Windows command prompt?
- Powershell update object property value not as expect
- How to exit from ForEach-Object in PowerShell
- "Run with PowerShell" gives execution policy error but running directly in PowerShell window does not
- PowerShell equivalent for package.json or requirements.txt
- Powershell - Why is Using Invoke-WebRequest Much Slower Than a Browser Download?
- How is child_process.exec('powershell "$userInput = Read-Host;"') handled in node.js?
- Powershell Set-MpPreference -DisableRealtimeMonitoring $true not working correctly
- Running a command as Administrator using PowerShell?
- How to run multiple commands at once with pause in PowerShell?
- When Converting excel to csv for empty cells quotes not coming
- Can't use sed when using ssh with ms powershell to linux host
- Using Try/Catch for PowerShell to switch between the two cmdlet gro group member?
- PowerShell Script Failing at insert records
- Webscrape table with powershell
- Connecting to remote server failed using WinRM from PowerShell
- VB.net string comparison with Powershell return output
- Laravel 4 + Iron: How to register a queue?
- PowerShell only accept Int
- How do I automatically create and use variable names?
- Loop through variables not through an Array
- Why and how are these two $null values different?
- Create file inside over 260 characters folder via AlphaFS module
- Powershell & bash: get all files matching a directory in the path and file name
- Install winget by the command line (powershell)
- PowerShell - ConvertTo-Json how to get ndjson result
- Getting a free drive letter