Where I’m @

20051221

srvcheck Undocumented Restriction?
We are trying to move one server’s content to another server’s hardware and so we’ve tried to enumerate the shares on the first in order to mirror them to the second, naturally. Microsoft’s utility srvcheck claims that it will give me the “non-hidden shares on a computer and [enumerate] the access-control lists for each one.” However, when we run it against a Win2K server, we don’t get back all the shares. We might assume that it does not return shares deeper in a directory hierarchy, but the missing ones are at the same directory level as one that is returned. The salient difference that we can see is that the shares not returned are shared to Everyone:F and only to that group at that permission, where the others have more fine-grained share permissions. What is yet more interesting is that running the utility against the destination server properly returns all non-hidden shares (or, more accurately, all non-administrative shares, as mentioned on Stewed Prunes), but it’s Win2K3.

Our working hypothesis is that running this util on 2K returns non-administrative shares with perms other than the default. We are somewhat more convinced of this because we tested it lightly. Created a share on the 2K box, left permissions unchanged, ran srvcheck, and didn’t see the new share. Added a global security group to the share perms, ran srvcheck, and saw the new share.

posted by Tk at 10:21 • • sealed in amber