Re: xcacls




"TJ_2006" <James.Scammell@xxxxxxxxx> wrote in message
news:1182443160.605299.300590@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi i have a massive directory containing the home directories, all
permissions are screwy and what i effectively want to do is set the
permisions for each home dir (obviously not alowing inhertiable
permisions) then the objects contained within that directory to
inherit them. the problem is if i enable policy inheritance it gives
it to the home drive itself making it insecure nd if i dont then if i
drill down a few dirs and it doesnt touch them.


any help would be greatly appreciated.


You could do this:
1. Knock out all permissions at the parent directory and all
subdirectories.
2. Seize ownership of the parent directory and all subdirectories.
3. Give full access to domain admins and "System" account at
the parent directory level, and turn on inheritance.
4. Run this command while inside the parent directory:
for /d %a in (*.*) do cacls %a /t /e /g %a:F

This command assumes that the folder names are identical
to the account names and that the folder names contain no
embedded spaces.

I note that your Subject line reads "xcacls". You can, of
course, use that command too but you will need to resolve
its syntax rules.


.



Relevant Pages

  • Re: Isolate home directory shares
    ... This kb article indicates that inheritance can be turned off using the /I ... I believe the command for one subfolder would be similar to: ... home directories are done with ADUC using profile tab: ... by default has full permissions assigned, there I am able to remove "allow ...
    (microsoft.public.windows.server.general)
  • Re: IIS, Win2003 and NTFS problem
    ... Assuming that you do have the file manipulation process running ... > zip it up and place it in his/her personal web directory (makes it ... > parent directory permissions, and they seem correct. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Permissions Question
    ... I would simply assign "Mike" full control to the parent directory and other ... users the Read permissions, and let the permissions get inherited into the ... You shouldn't need to worry about blocking inheritance or ... >I have a share named Images containing subfolders A,B,C. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Create (touch) file
    ... I think lack of permissions would produce a different error. ... checking to make sure the parent directory exists though. ...
    (comp.sys.mac.programmer.help)
  • Re: Data access and security permissions
    ... Norman, ... What permissions do the users have to the parent directory? ... However these aren't permission errors on the site database ...
    (microsoft.public.inetserver.iis.security)