Let's say a company has a large number of users, and each user has a home area.

On each share used for home area folders, I would like to define some rules saying who is supposed to have which permissions on the folder.

Then I would like to audit automatically, that this is actually the case and get some sort of report on deviations.

So a rule for \MegaServer\Home01 could be defined something like:

• Domain Admins - Full Control
• Backup Agent - Read
• [Home folder owner] - Full Control

I am talking about Windows platform and Windows servers, although I think it would most likely also work for *nix machines that expose Windows shares.

Does software like this exist?

I could roll my own basic version, but if something already exists, that is usually a better option.

I am aware of tools to make displaying permissions easier (AccessEnum, DumpSec), but that is not what I am looking for.