How to collect permissions information using smspermissioncheck.exe.


Article ID: 178945


Updated On:


Mail Security for Microsoft Exchange




The purpose of this article is to provide instructions for running smspermissioncheck.exe to collect permissions data pertaining to Symantec Mail Security for Microsoft Exchange (SMSMSE) installation to assist with troubleshooting implementation issues.


Initial Setup

  1. Download to the Symantec Mail Security for Microsoft Exchange server.
  2. Extract contents of
  3. Open command prompt (cmd.exe) as administrator.
  4. Within the command prompt, navigate to the extract location for
  5. Follow the usage instructions below to run the tool.


Tool usage instructions

smspermissioncheck.exe [-f] [-f -fr] [-rg] [-rg -rgr] [-cm] [-?]

Example usage:

  • smspermissioncheck.exe       >Collect top level folder, registry and COM permissions.
  • smspermissioncheck.exe -f    >Collect top level folder permissions only.
  • smspermissioncheck.exe -f -fr   >Recursively collect folder and file permissions
  • smspermissioncheck.exe -rg   >Collect Top level registry key permissions
  • smspermissioncheck.exe -rg -rgr   >Recursively collect registry key permissions
  • smspermissioncheck.exe -cm   >Collect only DCOM permissions.
  • smspermissioncheck.exe -f -fr -rg -rgr -cm   >Recursively collects folder, registry and COM permissions.
  • smspermissioncheck -?    >Obtain help information for command usage.

Running the tool will generate a log file "SMS_Permissions.log" in the same location as the tool.



1583712811285__smspermissioncheck.exe get_app