TeamCity agent permissions

Hi all,

I need to set up the permissions for some TC agents and I was wondering if you 
have previous experience on that.

I am looking into restricting folder access to 2,3 checkout folders and compiler 
required data. I am building using MSBuild, cygwin and some other bash/bat 
scripts.

Is there some tool to check for bulk permissions? For example, I need to get all 
folders that have write permissions and the users/groups that write to that 
folder - to remove, for example the Everyone user rights.

Do you have some best practices on that?

Thank you,
Best regards,
Adrian