• State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 32 subscribers
  • Views 7650 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Custom Report that maps users access to a directory

mercera
over 6 years ago

We are looking for a report that will show which groups (including nested groups) give a user access to a Windows share.

For example we would like to see how USER1 has access to SERVER1\Shared

SERVER1\Shared - GROUP1 has Modify Permissions, GROUP2 has Read Permissions, GROUP3 has Modify Permissions

GROUP4 is a member of GROUP2.

USER1 is a member of GROUP1 and GROUP2.

 

The report would look something like this:

Report for USER1 to SERVER1\Shared

------------------------------------------

USER1 -> GROUP1 -> SERVER1\Shared (Modify)

USER1 -> GROUP4 -> GROUP2 -> SERVER1\Shared (Read)

 

This is a small example.  A user may have access to the share through four or more sets of groups in some cases and the groups could be nested about five deep. 

 

We would specify the user name and server\share for the report.

 

It looks like a similar request was asked for here:

https://www.quest.com/community/products/enterprise-reporter/f/custom-reports/934/custom-report---folder-permissions---expanding-the-groups#

 

We would like the same kind of report, but we do not need every group expanded out.  We could limit the report to include one user to one specific share.  Some kind of report that would recursively check the users group-path to the share.

 

Thanks,

Allen

  • 0 over 6 years ago
    Hi Naureen,

    I deleted the old report and imported the new report, but we are getting the exact same error.

    Printing: Error when trying to populate the datasource. The following exception was thrown: Subquery returned more than 1 value. This is not permitted when the subquery follows =, !=, <, <=, >, >=, or when the subquery is used as an expression.

    Thanks,
    Allen
  • 0 over 6 years ago
    Hi,

    To investigate the issue, can you please execute these two queries on your database and let me know the output of first and second query. Please replace the 'YOUR_DOMAIN\YOUR_ACCOUNT_NAME_HERE' with the Account we are looking in the report.


    -- First Query
    declare @AccountName nvarchar(255)
    set @AccountName = 'YOUR_DOMAIN\YOUR_ACCOUNT_NAME_HERE'

    select count(1)
    FROM dbo.vwACEAccount A
    WHERE (CASE WHEN LEN([SAMAccountDomain]) = 0 THEN [SAMAccountName] ELSE [SAMAccountDomain] + '\' + [SAMAccountName] END) = @AccountName;


    -- Second Query
    declare @AccountName2 nvarchar(255)
    set @AccountName2 = 'YOUR_DOMAIN\YOUR_ACCOUNT_NAME_HERE'

    select count(1)
    FROM dbo.vwACEAccount A
    WHERE (CASE WHEN LEN([SAMAccountDomain]) = 0 THEN [SAMAccountName] ELSE [SAMAccountDomain] + '\' + [SAMAccountName] END) = @AccountName2
    and A.AccountType = 'U';

    Thanks
    Naureen
  • 0 over 6 years ago
    Each query returns: 2

    Thanks,
    Allen
  • 0 over 6 years ago
    Hi Allen,

    Thank you for sharing results with me.

    Apologies for the issues you are experiencing. Please contact your support rep so that one of our support engineers will be able to further investigate why the report that was provided is not working?

    Thanks
    Naureen