If you cannot find an answer, see the user manual (Japanese) or contact us.
FAD runs on Windows Server 2008 / 2008 R2 / 2012 / 2012 R2 / 2016 / 2019 / 2022 / 2025 and Windows 7 / 8 / 8.1 / 10 / 11. It has been tested on Japanese and English versions of the OS.
It has been tested on the Standard edition of server OSes and the Professional edition of client OSes. Operation on OSes whose support by Microsoft has ended is not guaranteed.
.NET Framework 4.6 or later is required. To handle long paths over 260 characters, 4.6.2 or later is required.
Not at present (NTFS only).
No. FAD is a tool for Windows NTFS access rights. Support for cloud files and Microsoft 365 permissions is under consideration (Roadmap).
Operation has been confirmed with NetApp 8 (ONTAP 8.1.4), connected from Windows over CIFS.
Operation has been confirmed with the latest version as of September 2019. Displaying owners can stop responding, so turn off "Tool" → "Owner Setting and Display" in the menu.
Yes, they can. What you can view and change depends on the permissions of the logged-on user.
When only administrators have permissions on a local folder, or when changing permissions in batch mode of the Enterprise Edition, permissions are restricted by UAC, so use "Run as administrator". For details, see chapter 21 of the manual, "Supplementary notes" (Japanese).
Just extract the downloaded ZIP file to any folder. The main files are:
From the Download page.
The event log settings (if you run REGADD.exe) are written under Services in the registry. In addition, Windows features save some settings in the user profile. The application settings are saved in FADConfig.xml in the same folder as the program.
Register the event log again. Run the included REGDEL.exe as administrator to remove the registration, then run REGADD.exe as administrator.
Yes. Remove it from the old PC (keeping it on both is a license violation). Also make sure the new PC meets the system requirements.
Japanese and English are supported (switch the language from the menu).
Paths of up to 32,768 characters are supported on local drives and network drives (.NET Framework 4.6.2 or later). To handle long UNC paths, map the shared folder as a network drive.
Everything that can be set on the "Security" tab (Advanced) in Windows Explorer. For details, see the manual (Japanese).
Yes to both. In environments not joined to a domain, you can set access rights with local users and groups.
FAD has no user management feature. Access is controlled by Windows accounts and the access rights of the target folders.
It varies greatly with the environment and the number of folders. For reference, permission output of an entire shared folder in a domain environment went from 1,574 seconds to 40 seconds in ver 3.0.9.23 and later (What's new). Please try it in your environment with a trial key.
A separately sold tool converts Excel files into setting files (XML) for batch mode of the Enterprise Edition. We can also discuss customization. Please contact us.
Excel is not required for output (creating the xlsx file). To view and edit the output files, use Excel or another spreadsheet application.
The current version does not access external networks or send any information, including for license activation.
There is currently no feature to move access rights together with the data (a server migration tool is planned; see the Roadmap).
For now, we recommend the following: before migration, export the permissions with FAD, save the access rights with the icacls command, and restore them on the new server. After migration, export again with FAD and compare before and after with the audit report to check for differences.
Setting access rights is a feature of the Professional / Enterprise Edition (paid). If you are using a paid edition, check that .NET Framework 4.6 or later is installed, that Windows Update is up to date, and that you have permission to change the folder (or ownership of it).
Since ver 3.0.11, permissions are shown the same way as in Windows Explorer (Advanced Security Settings). "Access" is the combined name of the permissions (Full control, Modify, Read & execute, etc.), and "Inherited from" is the folder an inherited permission comes from ("None" for permissions set directly). The order is also the same as in Explorer (set directly → inherited, Deny → Allow).
Turn on "Advanced" at the bottom of the screen to view and edit them. The "Advanced" setting is kept the next time FAD starts.
You do not have permission to change that folder. Use an account with permission to change it, or an administrator account.
Click an account name (link) to show the members of a group, or the groups a user belongs to.
The display name is empty if none is set for that account.
Deleted accounts and SIDs remaining in SID History cannot be converted to names, so they are shown as SIDs. Permissions of deleted accounts can be checked and removed together with "Tool" → "Deleted Accounts (List and Remove)..." in the menu.
Accounts in trusted domains can be displayed, but accounts in another domain cannot be changed. To set permissions on file servers in another domain, prepare a PC (and license) for each domain. If AD cannot be searched in a trusted domain, register an "LDAP Password" from the menu.
Yes. They are shown under "My Network" the next time FAD starts.
Becoming the owner does not grant access rights. Once you are the owner, "Add Row" becomes available, so add the access rights you need.
You need Full control permission on the folder, or ownership. Become the owner with the "Take Owner" button, then make the change.
The Windows "Server" service may be stopped. Close FAD, start the service, and try again.
See chapter 22 of the manual, "List of items" (Japanese) and Microsoft's documentation on access control.
Yes. (Privacy Mark is a Japanese certification for personal information protection.) The following three are commonly used:
Submission formats differ by organization, so adjust the output in Excel as needed. A feature to output audit-ready reports as they are is under consideration (Roadmap).
FAD does not prevent infection, but it helps you review permissions so that damage does not spread. Ransomware may encrypt files in any folder the infected user can write to. Use permission output to find folders where Everyone, Domain Users or similar groups have Modify permission, and narrow them down to the people who need it. Removing permissions of unused accounts is another measure.
Yes. Turn on "Reverse Lookup (User)" on the Output tab to output a list of the folders each account has permissions on (the Reverse Lookup (User) sheet). To include permissions through the groups a user belongs to (including nested groups), use "Tool" → "Effective Access of User...".
* Output across multiple servers is not supported.
Yes. Turn off the file list on the Output tab ("Output files" under "Rows" from 3.0.12) before output.
Up to 1,000,000 rows in total for folders and files. If the limit is exceeded, output stops and a message is shown (exit code 3 from the command line). If you are likely to exceed the limit, turn off "Output inherited" on the Output tab: folders and files with the same permissions as their parent folder (inherited only) are left out, so the number of rows drops sharply (from 3.0.12; levels up to "Always output levels" are still output). Support for output of more than 1 million rows is also planned (Roadmap). The account columns (user matrix) are limited to 10,000.
Yes, both are output (Professional / Enterprise Edition).
Use "Tool" → "Audit Report (Changes in Permissions)..." to create a report comparing two permission outputs. Changes in permissions, owners, inheritance and folders are listed as "added / removed / changed". For regular audits, combining the command line (FADCmd /diff) with Task Scheduler is convenient.
No. That is why you check the list before removal, and permissions are removed only after you enter a 4-digit number. What was removed is saved automatically in a removal report (xlsx), so if needed, use it to set the permissions again.
No. Manage users and groups with the Active Directory administration tools.
Operations such as adding, changing and removing access rights, searching for users and groups, and outputting reports. For details, see chapter 19 of the manual, "Operation logs" (Japanese).
On PCs with multiple NICs, all IP addresses and MAC addresses are recorded.
Events are recorded in FAD's display language at the time. If FAD was switched to English, they are recorded in English.
FADCmd.exe can do the following:
The exit code (%ERRORLEVEL%) tells you the result. For details, see chapter 20 of the manual, "Command-line execution" (Japanese).
Run batches from FADCmd.exe.
FAD has no timer feature. Create a batch file that runs FADCmd.exe, and run it with Windows Task Scheduler.
FAD is sold by download. Please apply via Contact. Payment is by bank transfer (credit cards are not accepted). For purchases from outside Japan, you can pay by bank transfer or PayPal.
Yes. We usually send them by email. They can also be sent by post.
We issue a trial key that unlocks all Professional features for a limited period (once per company). Please contact us.
Minor version upgrades are free; major version upgrades are paid.
Both are available. Please contact us for details.
It is the unit of environment in which FAD runs. Each virtual machine counts as one device, and for Remote Desktop, each connection counts as one device.
That is a license violation. You need as many licenses as the number of installations. When several people use one PC at the same time via Remote Desktop, a license is needed for each connection.
This feature is not available in the Free Edition. Please use the Professional / Enterprise Edition (paid). For the features of each edition, see Pricing & requirements.
No. For details, see the license terms.
Features and operating instructions are published in the user manual (Japanese) and on this site. Customers who have purchased a maintenance contract can use the dedicated inquiry form.
For 10% of the product price per year (1 year at a time, optional), it includes:
For details, see Maintenance support.
Yes. FAD is used by thousands of organizations, from Japanese government agencies such as the National Police Agency, the Ministry of Education, Culture, Sports, Science and Technology, the Japan Self-Defense Forces and the Tokyo Metropolitan Government Bureau of Construction, and universities such as Hitotsubashi University, to major companies in automotive, telecommunications, electronics, heavy industry, construction, finance and other industries (Customers). For details, see the case studies (Japanese).
We are happy to discuss it. Please contact us. You can write to us in English or Japanese.
No matching questions were found.