See Exactly Who Has Access to Your File Server — In Minutes, Not Hours

Why Analyze NTFS Permissions?

Every Windows file server accumulates permission sprawl over time. Users change roles, groups get nested inside other groups, and temporary access grants become permanent. The result: folders accessible by people who shouldn't have access, orphaned SIDs from deleted accounts, and "Everyone" permissions on sensitive data that nobody realizes are there.

Manually checking permissions with PowerShell (Get-Acl) works for a single folder but doesn't scale. You'd need to write scripts that recursively traverse directory trees, resolve nested group memberships, handle inheritance, and then format the output into something usable. For a file server with thousands of folders, this takes hours — and misses nested group access that isn't visible in raw ACLs.

What NTFS Permissions Auditor Does Differently

NTFS Permissions Auditor reads ACLs across your entire folder structure, queries Active Directory to resolve every group membership (including nested groups), and presents results in two views that answer the two fundamental permission audit questions:

Folder View — "Who has access to this folder?" Click any folder in the tree to see every user and group with permissions, whether they're inherited or directly assigned, and the exact permission level.

Account View — "What can this user access?" Expand any user or group to see every folder they can reach — including access inherited through nested group membership that isn't obvious from the raw ACL.

Reporting Permissions for Compliance and Auditors

The Pro version exports full permission reports to Excel (XLSX), PDF, CSV, HTML, and XML. You can generate folder-centric reports (organized by directory structure) or account-centric reports (organized by user/group) — whichever format your auditors need. Customizable export fields let you include exactly the data points required for SOX, HIPAA, PCI DSS, GDPR, or internal security reviews.

Tracking Permission Changes Over Time

One-time audits show current state, but ongoing monitoring requires comparing snapshots. The Pro version stores audit results automatically and lets you compare any two audits to generate a change report. This report highlights which folders had permissions added, removed, or modified — essential for detecting unauthorized access changes or documenting approved modifications.

You can schedule audits to run automatically and send change reports by email, so your security team gets notified only when something changes. This transforms a manual process into continuous, unattended monitoring.