NTFS Permissions Report — one-liner generator

Fill in the folder, pick options, copy the one-liner, paste it into an elevated PowerShell on the target server.

This page runs entirely in your browser — nothing is sent anywhere; the options are encoded into the link itself. Run the command in an elevated PowerShell (reading some ACLs needs Administrator). The report is written to your Desktop and opened automatically. base64 is encoding, not encryption — the folder path and any group name are readable in the link, so don't paste anything sensitive.
What to scan What to scan

Output Output
Advanced — performance, caching & console Advanced options

What each option does Option reference
OptionMeaning
-PathRoot folder to scan (required). The whole tree under it is read recursively.
-OutputHTMLWrite the interactive HTML report (folder tree, anomalies, per-group access). The main output.
-ResolveMembersLook up the direct members of each group (AD + local). Off by default because it queries domain controllers.
-OutputCSVWrite a flat CSV of every permission entry (one row per ACE).
-GenerateFixScriptWrite an icacls remediation script for the anomalies found (review before running).
-FilterGroupOnly show principals whose name contains this text, literally (no wildcards).
-MaxDepthLimit recursion depth. Blank/-1 = unlimited; 0 = the root folder only.
-ThreadsParallel scan threads (1-64). Defaults to the CPU count.
-CacheFileLoad/save a JSON scan cache for fast re-runs.
-ForceRescanIgnore an existing cache file and rescan, overwriting it.
-ShowTreePrint the full folder tree and per-principal lists to the console instead of just the summary.

Prefer not to use the env var? Download and run the script directly with inline parameters:

Your one-liner