Valid arguments

• UNC path to SMB share

Purpose

Review the share-level ACL.

Supported wildcards and quoting

• "…" — Quoting references in the section header with double quote marks is supported. If you need a literal double quote mark, escape the double quote mark by prefixing with a backslash (\"). Backslashes can be listed literally and do not need to be escaped. If your reference contains a space, or if you want to list multiple references in the section header, you should quote each reference.

Notes

Error: Could not read ACL for (share). Skipping section.
Solution: Martinet is running on a system that is probably not joined to the domain. The preferred solution is to join the system to the domain but if that's not possible, Microsoft has alternate recommendations: “If the authentication scheme is different from Kerberos, or if the client computer is not joined to a domain, then HTTPS transport must be used or the destination machine must be added to the TrustedHosts configuration setting. Use winrm.cmd to configure TrustedHosts. Note that computers in the TrustedHosts list might not be authenticated.”.

Suggested minimal permissions

Recommended permission is either read-only permission on the share Martinet is meant to evaluate or read-only permission on the folders at the root of the share. Read-only permission is the default permission for any account or group when adding an ACE.

Example sections

[SMB-share:\\unit-fileserver.ad.uillinois.edu\Data]

[SMB-share:"\\unit-fileserver.ad.uillinois.edu\Data" "\\unit-fileserver.ad.uillinois.edu\Storage"]