In this guide, I’ll show you how to list the NTFS permissions for all folders and subfolders.
I’ll also show you how to export the NTFS permissions to a CSV file.
Check it out.
Option 1: List and Export NTFS Permissions using GUI Tool.
For this first option, I’ll be using a GUI NTFS Reporting Tool to get a list of NTFS Permissions. The NTFS Reporter is part of a toolkit that includes 13 tools for managing Active Directory.
Step 1: Select Folder Path
Enter or browse to the folder where you are wanting to get NTFS permissions. You can select the folder depth which means how many subfolders deep you want to get permissions. You can also select to display the results in a tree view or grid view.
Next, click the run button at the top to get the NTFS folder permissions report.
Now I’ve got a list of NTFS permissions for the root folder, and two subfolders deep. The report includes the path, the account, directory owner, permissions, applies to, and inheritance.
Very fast and easy to use.
Step 2: Export NTFS Permissions to CSV
To export the list, select the export button and select “Export All Rows”
Here is an example export.
As you can see the GUI NTFS permissions reporting tool makes it very easy to get folder permissions and export them to CSV.
- Select folder depth
- Easily export the report to CSV
- Browse results in tree or column grid
- Filter and sort on any column
- Add/Remove and rearrange the columns
Option 2: Get NTFS Folder Permissions using PowerShell
To get NTFS folder permissions with PowerShell, the get-acl cmdlet is used. The one drawback to this command is that it doesn’t get subfolder (recursive) permissions. To get around this, you can use the get-childitem command and pipe it to the get-acl command. See examples below.
Example 1: Get NTFS Permissions on the Root Directory
For this example, I’ll get the NTFS permissions for my shared folder “\\srv-vm1\share”.
The output doesn’t look so great, it’s missing a lot of valuable information. To see more details you can pipe the results to format-list.
get-acl \\srv-vm1\share | format-list
That looks much better. I can now see the full permissions on this folder.
Example 2: Get NTFS Permissions on Subfolders with PowerShell
To get subfolder permissions, you will need to use the get-childitem command to first get all of the folders. Then it is sent to the get-acl command to get the permissions. Below is an example.
Get-ChildItem -Directory -Path "\\srv-vm1\share" -Recurse -Force | get-acl | format-list
You can see it is going through each subfolder in the root of my share folder and getting the permissions for each one.
You can now export this report to a CSV or text file. The below command will export to a text file.
Get-ChildItem -Directory -Path "\\srv-vm1\share" -Recurse -Force | get-acl | format-list | out-file c:\it\ntfs-report.txt
In this guide, I showed you two options to list NTFS permissions and export the report to CSV.
The GUI NTFS tool is very easy to use and is a great alternative for those that don’t want to deal with PowerShell Scripts. With PowerShell, it’s a little harder to get NTFS permissions as by default it only shows root folder permissions.
Either option will work for creating NTFS permission reports.