Summary

Report on ACEs without inheritance using the srs.current_ntfs_aces view.

Details

The srs.current_ntfs_aces view includes a field called ace_flags which is a value mask.

If the bit flag with a value of 16 is present, then the ACE is inherited. Filtering out inherited ACEs is a simple matter of checking that this flag is off.

Code

SELECT * FROM srs.current_ntfs_aces WHERE ace_flags & 16 <> 16