AccessChk
https://docs.microsoft.com/en-us/sysinternals/downloads/accesschk

Tool for assesing correct permission setup


Switches

-c Name is a Windows Service, e.g. ssdpsrv. Specify "*" as the name to show all services and "scmanager" to check the security of the Service Control Manager.
-w Show only objects that have write access
-d Only process directories or top-level keys
-nobanner(-q in old accesschk) omit banner
-s recurse
-u supress errors


Examples

Check permission of windows services for Usersgroup (Weak services)

accesschk.exe Users -cw *
accesschk.exe -wcv *

Check permissions for directories in c:\ for users in group Users(Weak directories)

accesschk.exe -uwds Users c:\
accesschkold.exe -uwdqs Users c:\

Check permissions for files in c:\ for users in group Users(Weak files)

accesschk.exe -ws Users c:\*.*


Notes

!!! Before running accesschk discover which groups does the whoami belong to !!!

net user <user>