I'm on a windows workstation, and I want a list of which files are open over the network on a windows server. The Shared Folders MMC Snap-in does this visually, and SysInternals' PSFile does it from the command line, but by default only for admins. I want to let regular users do this, too. What permissions do I need to grant them?
UPDATE: Running sysinternals' accesschk utility, I've found that there are lots of "weird" objects that have permissions but aren't in the filesystem, registry, or active directory. Run "accesschk -o" to see a list of object directories, and then add the name of a directory ("accesschk -o \BaseNamedObjects", for example) to see them. Could the functionality I'm looking for relate to some permissions in here? If so, is there any way to edit the ACLs on these things? (Even if not, I'd still love to find out which specific object represents the ability to enumerate remotely opened files.)
create a service that gets the info then dumps the result somewhere!