I have a very large DFS based file server structure. For audit purposes we want to enable access to specific users (group) to be able to read/list/traverse the folders and files on all the servers. I've found some scripts using icalcs and other tools to assign the permissions for the user to all the files. Recursive loop the folders and add the account/group with read permissions.
However I have noticed issues around these scripts and that they don't actually work fully. Directories and files that need the explicit grant access prompt not getting permissions. Even if run as a domain admin certain files and folders require the explicit grant and hence these are not set.
How can I report on ALL (don't block anything for any reason) folders and or files that a user can't access. I want to go back and manually or programmatically fix any folder that the users don't have access to.
So for example tell me any files user Jane Doe can't read or get access to on Server X in share/folder Y.