ActiveDirSec.Org

The world's most trusted forum on Active Directory Security


Post Info TOPIC: Has anyone tried the Free Permissions Analyzer from SolarWinds as seen on Petri?
CF


Member

Posts: 8
Date: Jun 15, 2011
Has anyone tried the Free Permissions Analyzer from SolarWinds as seen on Petri?
Permalink  
 


Hello,

The other day, I came across some website called Petri IT Knowledgebase, which seems to have a set of some articles on AD and other stuff.

Anyway, on top of most AD related pages on the website, there seem to be a paid advertisement / endorsement from Petri for some product called Free Permissions Analyzer from SolarWinds, and it specifically reads as follows...

"FREE: Discover Active Directory Effective Permissions In..."

Whenever I see something so flashy with a FREE offering, I am always hesitant to even click on the link, because it just sounds too good to be true.

I have been looking for a way to determine Effective permissions in Active Directory for a long time now, so I would like to know if this product can really discover effective permissions in Active Directory.

Has anyone tried this product? By endorsing it on every page, this Petri website seems to be putting its reputation behind it, although I have no idea what its reputation is too?

If you have tried, and it works, could you please share your thoughts?

- CF



__________________

My little dot on the web - Auditing Security in the Active Directory

 



Member

Posts: 18
Date: Jun 18, 2011
Has anyone tried the Free Permissions Analyzer from SolarWinds as seen on Petri?
Permalink  
 


Hi CF,

I've tried the Free Permissions Analyzer from SolarWinds and I can tell you that it has NOTHING to do with determining effective permissions in Active Directory.

In fact, this has to be one of the most misleading programs I have come across.

The Petri website is actually run by some Microsoft MVP by the name of Daniel Petri, and based on his credibility, I followed the link to download the software. I was deeply disappointed and I've heard many people share the same experience.

I don't mean to be paranoid, but, it sounds like a wonderful example of how someone could distribute a Trojan Horse, for the following reasons -

  1. It is worded to entice you by claiming to deliver on a very desirable capability
  2. It is offered for FREE, thus compelling you to try it in your environment
  3. It is not even digitally signed so you have no idea who actually wrote it
  4. Finally, it is only when you have installed and run it that you find out that it has nothing to do with determining effective permissions in AD.

Any IT security expert will tell you that malicious software only needs to be run ONCE in your environment, for it to compromise your systems. That's the only shared experience I've heard others had with this tool i.e. you open (run) it and then you realize this has nothing to do with what it claims to do.

I find it rather disappointing that a Microsoft MVP would put his reputation on the line for this. Incidentally, if you view his bio (on his website), it reads as though he is second only to Bill Gates. I know many MVPs, and while I have no doubt that he may be smart, such unbridled self-praise is not expected of an MVP.

I would steer clear of this absolutely misleading tool.

Nathan.



-- Edited by Nathan on Saturday 18th of June 2011 04:11:41 PM

__________________
Today is the tomorrow we worried about yesterday
Ray


Member

Posts: 17
Date: Jun 24, 2012
RE: Has anyone tried the Free Permissions Analyzer from SolarWinds as seen on Petri?
Permalink  
 


Hi CF,

I would have to agree with Nathan. Although I have not personally tried the tool, some of my colleagues have tried it, and they were of the opinion, that its a misleading product, and has nothing do with determining Effective Permissions or Delegated Access in Active Directory.

If I recall correctly, I believe they indicated that it does some basic analysis on files stored on servers and may includes the membership of Active Directory groups when determining who has what access on files.

Personally, I tend to stay away from misleading products. Even Google reviews on it barely give it a 2/3 star, and that's a good indication of what admins think of it.

Like I said, I have not tried it, because I have not heard good things about it, but you can always draw your own conclusions.

>Ray



__________________
One misconfigured 00299570-246d-11d0-a768-00aa006e0529 is all I need.


Member

Posts: 6
Date: Jun 29, 2012
RE: Has anyone tried the Free Permissions Analyzer from SolarWinds as seen on Petri?
Permalink  
 


Ray,

I would stay away from Permissions Analyzer from Solar Winds. I would suggest trying the free PowerShell Commands from Quest instead.

Vladmir.



__________________

Да здравствует Россия!  Министерство обороны Российской Федерации



Newbie

Posts: 1
Date: Jul 4, 2012
RE: Has anyone tried the Free Permissions Analyzer from SolarWinds as seen on Petri?
Permalink  
 


Yeah it is a very misleading name and basically all it does is the same as the Effective Permissions tab you see if you click the Advanced button in the permissions editor for a file/folder. If you are looking for a full file system permissions auditing/reporting tool I recently released one, and there's a free edition that still has a lot of features and isn't time limited or anything. More info and screenshots on my website here for anyone interested: http://cjwdev.co.uk/Software/NtfsReports/Info.html


__________________
Applications for IT Pros that I've developed: http://www.cjwdev.co.uk
Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Post to Digg Post to Del.icio.us
Members Login
Username 
 
Password 
    Remember Me