Free tools Windows power users keep installed
One-click scans. No signup required.
An ACL export shows which users and groups have permissions; it cannot decide whether that access is still needed, fits someone’s role, or was approved. A useful file-share access review puts an accountable asset owner in charge of those decisions, then tracks inappropriate access through remediation and verification.
Who should review access to a file share?
The asset owner should make the primary access decisions, with IT or security staff supplying permission evidence and implementing approved changes. CISA’s Cyber Resilience Review: Question Set with Guidance states that periodic privilege review is primarily the responsibility of asset owners. The owner brings the context a permissions list lacks: the share’s purpose, sensitivity, and the people or roles that need it.
As an Amazon Associate I earn from qualifying purchases.
For each identity or group, the owner should determine whether its privileges are necessary for the asset, align with current job responsibilities, and have owner approval. CISA flags privileges that exceed an asset’s needs, do not match an identity’s role, or were assigned without owner approval as review concerns. CISA Cyber Resilience Review: Question Set with Guidance
How do I review NTFS and share permissions?
Use an owner-led workflow that combines permission evidence with a decision and a verified outcome. The evidence-gathering details below are practical implementation advice; CISA establishes the review criteria, but does not prescribe a particular export format or Windows administration interface.
#1 Best Overall
- The Data Recovery Stick requires no technical skills — simply plug it into your Windows computer, click Start, and the software automatically begins scanning and recovering lost files within minutes. Compatible with Windows Vista, 7, 8, 10, & 11, it's designed to be a reliable first step when accidental deletion occurs.
- Recover photos (JPG, BMP, PNG, TIFF), Microsoft Office documents (Word, Excel, PowerPoint, Publisher, Access), Open Office files, MP3 music files, PDFs, RTF documents, AutoCAD files, and HTML web pages. Whether it's personal memories or critical business files, the Data Recovery Stick covers the file types that matter most.
- Works with hard drives, USB drives, SD cards, memory sticks, and other common storage formats that use FAT or NTFS file systems — making it a single solution for hard drive recovery, USB drive recovery, SD card recovery, and more. Note: a media reader is required for micro SD cards and some mass storage devices.
- No Installation Required - The Data Recovery Stick runs entirely from the USB drive with no software installation on your computer — helping prevent new data from overwriting the files you're trying to recover. This also makes it ideal for use across multiple computers or in emergency situations where installation isn't practical.
- Use the Data Recovery Stick on as many computers as often as needed — simply clear the recovered data between uses to free up storage space. Software updates keep the tool compatible with newer systems and devices, backed by 25+ years of data software expertise from Paraben Consumer Software.
- Define the asset and accountable owner. Identify the share, its business purpose and sensitivity, and the person authorized to decide who needs access.
- Gather effective-access evidence. Review applicable share-level and file-system permissions, inherited permissions, group membership, and relevant identity context. Consider the files and directories in scope, not only the share root.
- Ask the owner to decide. For each identity or role/group, assess whether its access is needed for the asset, fits its current responsibilities, and has owner approval. Investigate unclear entries rather than treating their presence in the export as justification.
- Prioritize powerful permissions. Scrutinize Write, Modify, and Full Control, applying least privilege and restricting these permissions where possible. CISA identifies overly broad share permissions as a security misconfiguration and recommends restricting file and directory access to authorized users. CISA and NSA cybersecurity misconfigurations; CISA best practices for continuity of operations
- Record decisions and assign changes. Keep an operational record of who reviewed the access, the decision and its rationale, and who owns any resulting change. This helps distinguish an approved exception from an overlooked permission.
- Remediate and verify. Remove, reduce, or disable inappropriate privileges and invalid accounts in a timely way. Confirm that the change took effect and close the finding only after checking the resulting access.
- Set a risk-based cadence and triggers. Define when the organization will repeat reviews and what events prompt an earlier check, such as a change in business need or role. CISA calls for organization-defined periodic reviews and continuous review of centralized file-share ACLs; it does not establish one calendar interval for every organization.
Is exporting the ACL enough?
No. An export is evidence of assigned permissions, not an access decision. It may help expose users, groups, and permission levels, but it cannot establish from the list alone whether access is needed, matches the person’s role, or received owner approval.
| Review dimension | ACL export alone | Owner-led review |
|---|---|---|
| Evidence versus decision | Lists assigned permissions. | Assesses business need, role fit, and approval for access. |
| Coverage | Shows the entries included in the export; does not by itself establish that relevant identities, groups, files, and directories were considered. | Considers relevant identities and groups in the context of the share and its contents. |
| Risk focus | May display permission levels without establishing their appropriateness. | Applies least privilege and gives particular attention to Write, Modify, and Full Control. |
| Actionability | Does not itself remove access or confirm closure. | Routes decisions to remediation and verifies that changes took effect. |
This comparison is a practical way to distinguish evidence collection from a completed review, not a formal CISA scoring framework.
Rank #2
![Free Fling File Transfer Software for Windows [PC Download]](https://m.media-amazon.com/images/I/41Vq6ZqHfjL._SL160_.jpg)
- Intuitive interface of a conventional FTP client
- Easy and Reliable FTP Site Maintenance.
- FTP Automation and Synchronization
What permissions should I remove?
Remove or reduce access when the owner cannot establish a current business need, when the privilege does not fit the identity’s role, or when it lacks required owner approval. Pay special attention to Write, Modify, and Full Control because they can allow changes to or control over shared content. CISA recommends restrictive permissions and restricting these powerful rights on centralized file shares when possible; the appropriate replacement level depends on what the person needs to do.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Also address invalid accounts and inappropriate group memberships. CISA says excessive or inappropriate privileges should be corrected in a timely manner, including by modifying or disabling privileges and disabling invalid accounts. CISA Cyber Resilience Review: Question Set with Guidance
Rank #3
![Express Schedule Free Employee Scheduling Software [PC/Mac Download]](https://m.media-amazon.com/images/I/41yvuCFIVfS._SL160_.jpg)
- Simple shift planning via an easy drag & drop interface
- Add time-off, sick leave, break entries and holidays
- Email schedules directly to your employees
How often should file-share permissions be reviewed?
There is no universal calendar interval established by the cited CISA guidance. It calls for periodic privilege reviews on a schedule defined by the organization and separately calls for continuous review of centralized file-share ACLs. Set a cadence that reflects the share’s sensitivity and operational risk, document it, and define events that trigger a review sooner. Do not treat an export run on a schedule as a substitute for owner decisions and follow-through.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Are SharePoint and OneDrive links part of the same review?
They are a related access surface, but cloud sharing links are not interchangeable with Windows share or NTFS ACLs. CISA’s SharePoint and OneDrive secure configuration baseline recommends making “specific people” the sharing default and using View as the default file or folder permission. It discourages Anyone links and verification-code sharing because those options provide weak or no authentication. Review these link settings under the cloud service’s controls, separately from the Windows permissions review. CISA SharePoint and OneDrive Secure Configuration Baseline
Quick Recap
Best Value
Rank #4
![(Old Version) H&R Block Tax Software Deluxe 2024 Win/Mac with Refund Bonus Offer (Amazon Exclusive) [PC/Mac Online Code]](https://m.media-amazon.com/images/I/41QZxJz1JnL._SL160_.jpg)
- Choose to put your refund on an Amazon gift card and you can get a 2% bonus. See below for details
- Quickly import your W-2, 1099, 1098, and last year's personal tax return, even from TurboTax and Quicken Software
- Reporting assistance on income from investments, stock options, home sales, and retirement
- Guidance on maximizing mortgage interest and real estate tax deductions (Schedule A)
- Step-by-step Q&A and guidance
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
