Re: CACLS

From: Oli Restorick [MVP] (oli_at_mvps.org)
Date: 04/01/04 

Date: Thu, 1 Apr 2004 17:31:16 +0100

Would "cacls /t /g user:F" help?

By the way, any user with administrative privileges on the machine could
take ownership of the file and reset the permissions. Also, members of the
Backup Operators group can gain access to the file.

Oli

"Marcelo López" <marcelol@infocorp.com.uy> wrote in message
news:uQe$3$$FEHA.3640@tk2msftngp13.phx.gbl...
>I still have this problem. could anyone help me ??
>
> From: "Marcelo López" <marcelol@infocorp.com.uy>
> Subject: Re: Problem using CACLS
> Date: Thursday, April 01, 2004 10:11 AM
>
> hi,
>
> if i add the last user grant: "domain admins":F
> the administrator could access my folder, and i want only my special user
> to
> access the folder !!
>
> May be i'm forgotting some command to include all subdirs in my cacls
> command ?
>
> Regards
>
>
> "Michael Bednarek" <mb at mbednarek dot com> wrote in message
> news:6nui60p706gj5ber3v0v34m002g5e7t4mb@4ax.com...
>> On Mon, 29 Mar 2004 16:14:45 -0300, "Marcelo López"
> <marcelol@infocorp.com.uy> wrote in
> microsoft.public.win2000.cmdprompt.admin:
>>
>> >hi all, i'm developing a win app which requires have a folder which no
>> >others users can access it.
>> >
>> >So, i'm using impersonation, to switch to a special user created for my
> app.
>> >
>> >To create the folder and give permissions to this "special user" i use
>> >de
>> >prompt command
>> >
>> > CACLS folder /G specialuser:F
>> >
>> >It gives full control to the special user over the folder.
>> >
>> >It worked ok, the special user can access the folder, create and move
> files,
>> >etc. And no other can access the folder from the outside.
>> >
>> >But the problem is that when i want to create a SUBFOLDER inside the
> folder,
>> >the os throws an access denied exception.
>>
>> Did you forget to grant yourself the necessary permissions?
>> CACLS folder /G specialuser:F "Domain Admins":F
>>
>> >I tried using the Change permission (user:C) but it didn't work.
>> >
>> >Coudl someone help me ?
>> >
>> >Regards,
>> >
>> >Marcelo López.
>> >Infocorp Latin America.
>>
>> --
>> Michael Bednarek http://mbednarek.com/ "POST NO BILLS"
>
>
>
>

Relevant Pages

  • Re: Help with cacls in WinXP Home
    ... Take Ownership of a File or Folder in Windows XP ... all the information I have of CACLS: ... Just because you can set permissions with Cacls doesn't mean you should. ... Try the Cacls command on a test folder first and make sure that your ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Using cacls
    ... Create a test folder and test your commands before you perpetrate some evil on a system folder. ... > Sorry - I've just read back through my other postings in this thread> re why you are using cacls :-((I'm not sure what syntax you are> using for cacls, but it should be in the format of:> ... I was able to>> change the permissions to 'C" I also tried "f" for full>> access. ... How do I alter the limited user acount. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: xcacls + subfolders and files only
    ... change the default permissions on all folders whether they exist or not. ... still think that CACLS will do what you are wanting to do. ... folder named joe's folder, I would never expect any OS to know the correct ... then run the command NEWFOLDER username such as NEWFOLDER JOE ...
    (microsoft.public.win2000.security)
  • Re: How to change permissions on folders
    ... xcacls or cacls will do what you want. ... permissions to "change" for a user's folder on a server ... /T Changes the ACL of the folder and all files ...
    (microsoft.public.scripting.vbscript)
  • Re: Deleting shortcuts when they are for a C: program
    ... And we only have a name as a parameter so it should say Not Found or the permissions. ... > Displays or modifies access control lists of files ... CI - Container Inherit. ...
    (microsoft.public.windowsxp.general)