Novell Cool Solutions: Cool Tool
Locate objects you can't see due to IRF (Inherited Rights Filter) blocking?
|Posted:||22 Nov 1998|
Please read the note from our friends in legal before using this file.
There may be times that you have wondered if you have any containers or user or other objects in your NDS tree that you are not aware of, because you can't see them due to IRF blocking. Well, NDSTree is designed to locate and identify those stealth objects.
Once you have located the stealth objects, you can then use MakeSU to gain access to them.
NDSTree is made up to two programs. One a DOS utility and the other an NLM. The NLM version will list all objects in your NDS tree regardless if they have any IRF blocking them from normal view. By comparing the output from the NLM version to that of the DOS version, you can easily locate and identify any stealth objects you may have in your tree.
In v1.01, an additional security-checking feature has been added. With the registered version, you can produce a report of which objects are Security Equals to other objects. This is useful in tracking down, for example, users that have Supervisor rights to Server objects. Because when a user is SE to a server object, the user is automatically granted Supervisor file system rights to ALL volumes on that server. This file system right can not be revoked using file system IRFs (because of the S file system right). Also, there is no easy way to find such a user using NETADMIN or NWAdmin. You can, however, use NLIST to locate such objects, but the output is pretty "ugly".
This is a must-have tool for any NetWare 4 and NetWare 5 sites that have multiple (NDS) network administrators, or for anyone serious about NDS security.
See NDSTREE1.HTM enclosed in the ZIP file for detailed information about NDSTree.
NetWare 5 certified. (YES Bulletin #45526)
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com