How to Get a List of Users who have Change/Full Control Access on Different NT Server

Keywords:     error 561: Invalid Group Name error 564: error getting group information	wntAccessGet  wntMemberList  SHOWMBRS

---

Question:

I'm on an NT 4.0 SP3 server trying to list all the people who can access a directory on another NT server.

I can use Windows Explorer, look at the permissions for the directory on the other server and see the type of access.

In Winbatch:

1. I can get the groups who can access the directory using wntAccessList.

2. I can get the type of access for each group using wntAccessGet.

   But I get error 561: Invalid Group Name when I try to get the members of a Global Group using wntMemberList.

   Here's the code:

   
   TheServer="\\sfdxx001" 
   TheGroup="P_GenAcct_Web" 
   MemberList = wntMemberList(TheServer,TheGroup,@GLOBALGROUP) 
   

   The group is in domain MASTER and the machine I'm running on is in domain TEST.

Answer:

You'll have to do it the hard way using SHOWMBRS from the NT 4.0 Resource Kit.

1. Do a RUNWAIT on a DOS batch program (since SHOWMBRS is a DOS program) with I/O redirection.

2. Then read the file for the member names.

Crude but it works.

---

Article ID:   W13543

Filename:   List of Users Who Have Group Access.txt