What state do you live in? I'll FedEx the beer, as long as the goods pass the test. [Wink]

EXE is fine as long as it doesn't require an installation on every logon server. In other words, if it's a portable EXE. A DLL might be alright as well, but I'd have to REGSVR it on the logon servers I expect.

The net result is the ability to:
(A) enumerate all shares or...
(B) only admin shares or...
(C) only non-admin shares
(D) show groups that have explicit or direct inherited permissions on the share and what permissions (R/W/D/etc.)

If I have a share that is "FolderA" for C:\FolderA and have removed "Everyone" from the DACL shares permissions collection and added "Domain Users" only, the report should show:

Share=FolderA
Path=C:\FolderA
Groups:
Domain Users, R/W/D

Just a suggested format, not required format or structure. Hopefully this makes sense?
_________________________
silence is golden, but duct tape is silver