Extend PS script for Everyone shares

[malraff]

hi

i have been using the below script (hobbled together by other peoples work, not mine)

and it would be perfect if i could extend it to only show shares that have used Everyone to assign rights

any ideas ?

mal

# Add powershell modules for Active Directory
import-module activedirectory;

# Get list of servers from Active Directory
$servers = get-adcomputer -filter {operatingsystem -like "*server*"} | where {$_.enabled -eq $true};

# Loop through each server found
foreach ($server in $servers) {

    # Check if server can be pinged
    if(test-connection -cn $server.name -quiet -count 1) {

    # Output to screen the name of the server
    write-host "-------------";
    write-host $server.name;
    write-host "-------------";

    # Get the list of shared folders
    $shares = gwmi win32_share -computer $server.name;

    # Loop through each shared folder found
    foreach ($share in $shares) {

        # Exclude default drive shares, other system default shares and printers
        if (($share.name -ne "print$") -and ($share.path -notlike "*LocalsplOnly*") -and ($share.name -notmatch ".\$") -and ($share.name -ne "ipc$") -and ($share.name -ne "sysvol") -and ($share.name -ne "netlogon")-and ($share.name -ne "admin$")) {

            # Output to screen the name and path of the shared folder
          # write-host $share.name $share.path;
  $out = $server.name + "," + $share.name + "," + $share.path
  $out >> C:\reports\shares.csv
            }

        }

    write-host "";

    }
}

[Neally]

Welcome

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum!

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…

[DoctorDNS]

For each share, you can get the share’s access using Get-SmbShareAccess.

You can find the shares which have an everyone ACE like this:

Get-SmbShare | Get-SmbShareAccess | Where-Object name -match 'everyone'

NB - on my hosts I get nothing but I have nothing shared to everyone.