Leos Marek

In my previous post about NTFS permissions, I showed you how to list file or folder permissions that differ from those of their parent. Today, you’ll learn how to use AccessChk, a tool from the Sysinternals suite, to query files, folders, shares, services, and other objects for their effective permissions.

Reading NTFS permissions for files and folders on a Windows device to find misconfiguration can be a cumbersome and time-consuming task. Basically, there are two options for accomplishing the task. Either you can read NTFS permissions for every scanned object and analyze the results, or you can find misconfigured permissions and list only the differences. Let me show you how to do the latter with the help of AccessEnum, a GUI tool from the Sysinternals Suite.

In my previous post, Terminate Windows processes with PsKill, I explained how to use PsKill to kill Windows processes on local or remote systems. As mentioned in the post, PsKill is a rather old tool with just a few options. Today, I will explain how to use two built-in tools: Tskill and Taskkill.

If you cannot delete a file or folder and the operation fails with the error message “This action can’t be completed because the file is open in another program,” some questions come up. Was is another program? How can it be identified? In this post, I will show you how to use Handle and Process Explorer, tools from the Sysinternals suite, to answer these questions.

When you have a performance issue, random access memory (RAM) is usually the second thing to check right after the CPU counters. Let’s see how you can analyze Windows memory usage with RAMMap, a tool from the Sysinternals suite.