Win32_Share

OK.... this is more of a WMI question than a Powershell question...

I need to verify that a share is available to "Everyone". I was using
gwmi Win32_Share to do the check, but according to MSDN, the results
of the GetAccessMask method "Returns the access rights to the share
held by the user or group on whose behalf the instance is
returned.".

How do I get the Win32_Share instance for "Everyone"?

Thanks

Frustrating, ain't it? Working with permissions via WMI is pretty thankless,
sometimes. FWIW, the only way I was able to do what you're after (not saying
there's not another way, this is just what I found that worked) was to build
a .NET executable that launched a new process under the Everyone well-known
SID, and had THAT process execute the WMI query. But that involved jiggering
the WMI permissions, too, since "Everyone" doesn't have Remote Enable in the
WMI repository, by default.

Win32_Share is pretty much designed so that you can check YOUR permissions
to it, as you note.

FWIW, http://www.codeproject.com/useritems/WIN32_Share.asp might provide
some background information or alternative ideas for you.

--
Don Jones
Windows PowerShell MVP
Founder: www.ScriptingAnswers.com
Co-Author: "Windows PowerShell: TFM"

"Clint Bodine" <csbodine@gmail.com> wrote in message
news:1178902677.073429.30620@p77g2000hsh.googlegroups.com...
> OK.... this is more of a WMI question than a Powershell question...
>
> I need to verify that a share is available to "Everyone". I was using
> gwmi Win32_Share to do the check, but according to MSDN, the results
> of the GetAccessMask method "Returns the access rights to the share
> held by the user or group on whose behalf the instance is
> returned.".
>
> How do I get the Win32_Share instance for "Everyone"?
>
> Thanks
>

Hey Don!

Thanks for the input. After I posted my message, I kept digging deeper
and deeper and this is what I found:

$LSSS = Get-WmiObject -Credential $cred -ComputerName $computer -class
Win32_LogicalShareSecuritySetting -filter "Name = '$sharename'"
if($LSSS) {
$output = "";
$dacl = $LSSS.GetSecurityDescriptor().descriptor.dacl;
$dacl | %{ $output += " User: $($_.Trustee.Name)`tAccessMask: $
($_.AccessMask.toString('x'))`n"; }
write-host $output;
}

I got the idea from here (at the bottom of the page):
http://www.scriptinganswers.com/Arch...ermissions.htm
and just walked through the results until I found the data I was
looking for. $output collects the names of every Trustee that has
some sort of permission to the share.

On May 11, 12:25 pm, "Don Jones [MVP]" <d...@sapien.com> wrote:
> Frustrating, ain't it? Working with permissions via WMI is pretty thankless,
> sometimes. FWIW, the only way I was able to do what you're after (not saying
> there's not another way, this is just what I found that worked) was to build
> a .NET executable that launched a new process under the Everyone well-known
> SID, and had THAT process execute the WMI query. But that involved jiggering
> the WMI permissions, too, since "Everyone" doesn't have Remote Enable in the
> WMI repository, by default.
>
> Win32_Share is pretty much designed so that you can check YOUR permissions
> to it, as you note.
>
> FWIW,http://www.codeproject.com/useritems...Share.aspmight provide
> some background information or alternative ideas for you.
>
> --
> Don Jones
> Windows PowerShell MVP
> Founder:www.ScriptingAnswers.com
> Co-Author: "Windows PowerShell: TFM"
>
> "Clint Bodine" <csbod...@gmail.com> wrote in message
>
> news:1178902677.073429.30620@p77g2000hsh.googlegroups.com...
>
> > OK.... this is more of a WMI question than a Powershell question...
>
> > I need to verify that a share is available to "Everyone". I was using
> > gwmi Win32_Share to do the check, but according to MSDN, the results
> > of the GetAccessMask method "Returns the access rights to the share
> > held by the user or group on whose behalf the instance is
> > returned.".
>
> > How do I get the Win32_Share instance for "Everyone"?
>
> > Thanks