Re: Set Permission for User

From: Jerold Schulman <Jerry@xxxxxxxxxx>
Date: Tue, 13 Sep 2005 08:22:11 -0400

On Tue, 13 Sep 2005 12:37:50 +0530, "Katheryne" <smraj@xxxxxxxx> wrote:

>Hi ,
> I could write a script to create a newuser but unable to deny the
>permissions like "Read &
> Execute","List Folder Contents","Read" Permisions for this User.Please
>Help.
> Thanks,
>Kathy
>

Use CACLS.EXE, built into all the NT-based oses or XCACLS.vbs.

See tips 1556 » How do I use CACLS in batch?
and 8225 » The Extended Change Access Control List tool (Xcacls.vbs) has been enhanced and replaces Xcacls.exe.
in the 'Tips & Tricks' at http://www.jsifaq.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com
.

References:
- Set Permission for User
  - From: Katheryne

Prev by Date: Re: Checking for empty directory
Next by Date: how do I change this vbscript so that I can use it remotely?
Previous by thread: Set Permission for User
Next by thread: how do I change this vbscript so that I can use it remotely?
Index(es):
- Date
- Thread

Relevant Pages

Set Permission for User
... I could write a script to create a newuser but unable to deny the ... permissions like "Read & ... Kathy ... Prev by Date: ...
(microsoft.public.scripting.vbscript)
Re: how to restrict users to search in their own Organizational Unit
... I also want to say that in fact you shouldn't deny the read permission to anyone and this scenario the MOSS Administrators or who is responsible for Add users to Your Sites should be carefull when performing this action. ... Now, because you're dealing with many users, my recommendation is to create THE NECESARY Security Groups in each OU and related them with your MOSS2007 existing security groups, in future when someone creates some user, you just have to add that user to the necessary group and that user will be given the necessary permissions. ... decided a script can make it possible to accomplish, ... > If I need to create a security group per OU and then add all users ...
(microsoft.public.windows.server.active_directory)
Re: Share Permissions: Deny behaviour
... Deny overrides all other permissions. ... There are two types of Deny (again goes for share and NTFS). ... explicit allow permission, then you're stuck with implicit deny. ...
(microsoft.public.windows.server.general)
Re: how to restrict users to search in their own Organizational Unit
... decided a script can make it possible to accomplish, ... You could also TRY removing the "Authenticated Users" ... Domain level since using a lot of DENY ... permissions is in and of itself a poor practice. ...
(microsoft.public.windows.server.active_directory)
Re: NTFS Security Question.
... I was not sure that deleting the special permissions would work but you ... Since Windows 2000 deny NTFS permission does not work ... originally configured "closer" to the object in the chain of folders. ...
(microsoft.public.windowsxp.security_admin)