code:

---

$OutputFile = "c:\data\shares.csv"
$RunFile = @scriptdir+"\dumpsec.exe"
If Exist($RunFile)=1
	$RunCmd = $RunFile+" /showdirsonly /rpt=allsharedirs /outfile="+$OutputFile+" /saveas=csv /noheader"
	AT (16,44) "Running Scan of Shares..."
	Shell $RunCmd
	If Exist($OutputFile)=1
		AT (16,44) "Reading Scan Report..."
		If Open(1, $OutputFile,2)=0
			$x = ReadLine(1)
			While @error = 0
				$line = Trim($x)
				If InStr($line,",")<>0
					$parse = Split($line, ",")
					If VarType($parse)>0
						$path = Trim($parse[0])
						$perm = Trim($parse[1])
						If $perm="Everyone"
							$found = 1
							EndIf
					EndIf
				EndIf
				$x = ReadLine(1)
			Loop
			Close(1)
			Del($OutputFile)
		EndIf
	Else
		AT (16,44) "Failed to Create Report..."
	EndIf
	If $found=1
		$LogFile=@lserver+"\data\OpenShares-"+@userid+".INI"
		If Open(2,$LogFile,5)=0
			WriteLine(2, ";; Kix Logon Inventory Report" + @crlf + @crlf)
			WriteLine(2, "[OPENSHARES]" + @crlf)
			WriteLine(2, "Machine="+@wksta+@crlf)
			WriteLine(2, "UserName="+@userid+@crlf)
			WriteLine(2, "RunDate="+@date+@crlf)
			Close(2)
		EndIf
		;MessageBox("Open Shares Found!", "Open Share Audit",0)
	EndIf
Else
	MessageBox("Unable to Locate DumpSec!","Open Share Audit",0)
EndIf

---

• Administrary shares are special: C$ D$ etc.. only access for admins.
• Default share access is everyone full control (BUT!!!)
• NTFS permissions defaults to everyone read and admins full control (only read access for users)

So if you use NTFS on all systems, you shouldn't have any open shares by default.

-Erik
{Edit}
Sorry
Reread your post:
I missed the access (In some manner)
{-Edit}

[ 10. February 2003, 23:57: Message edited by: kholm ]

code:

---

[\\server\share]
Path=C:\FolderA
Domain Users=C
Domain Admins=F
[\\server\share2]
Path=c:\folderB
Domain Admins=F

---