Re: SUBINACL syntax error

Just for fun I downloaded and tested the latest version myself.
I had no problem running it. What is the syntax of your command?
Are you aware that the order of parameters is important?


"Jeff Vandervoort" <jeffv @ jrvsystems dot com> wrote in message
news:OaSB2zq8GHA.3396@xxxxxxxxxxxxxxxxxxxxxxx
Thanks for your replies.

1. I'm using SUBINACL v5.2.3790.1180, the latest from the MS downloads
site.

2. The problem occurs when I use either /ERRORLOG *or* /OUTPUTLOG.

3. The invalid option cited in the message I get ONLY when those options
are
used is the subdirectory spec, D:\*.*. D:\ exists on this system.

Additional information not included in my original post: It doesn't matter
what drive, filename or folder I specify for /ERRORLOG and /OUTPUTLOG; I
get
the same error. IOW, the problem is not that I'm trying to write the log
to
a folder that is being changed.

--
Jeff Vandervoort
JRVsystems

"Jerold Schulman" <Jerry@xxxxxxxxxx> wrote in message
news:lf4cj2dcuobaghjg6ouh0krsjltakmqdsr@xxxxxxxxxx

See tip 8530 » Corrected version of SubInAcl.
in the 'Tips & Tricks' at http://www.jsifaq.com

On Tue, 17 Oct 2006 19:52:37 -0500, "Jeff Vandervoort" <jeffv @
jrvsystems
dot com> wrote:

This has to be embarassingly basic, but it has me stumped...

I'm trying to use SUBINACL (v5.2.3790.1180, the latest from the MS
downloads
site) to search and replace ACEs on a WS2003SP1 server. The command I'm
using follows (lines broken for easier reading:

SUBINACL
/TESTMODE
/SUBDIRECTORIES
D:\*.*
/REPLACE="[domain1]\[group1]"="[domain2]\[group2]"
/ACCOUNTMIGRATION="[domain1]\[group1]"="[domain2]\[group2]"
/ERRORLOG="D:\SubInACLError.log"
/OUTPUTLOG="D:\SubInACL.log"

The command works fine if I omit both /ERRORLOG and /OUTPUTLOG. But if I
add
either switch, I get this output:

WARNING : /errorlog=d:\subinaclerror.log : Invalid option : D:\*.*
Use :
SubInacl /help to get the usage information
or
SubInAcl /help syntax to understand SubInAcl syntax.
Current object D:\*.* will not be processed


Elapsed Time: 00 00:00:00
Done: 0, Modified 0, Failed 0, Syntax errors
1
Last Syntax Error:WARNING : /errorlog=d:\subinaclerror.log : Invalid
option
: D:
\*.*

Hunh?? D:\*.* suddenly becomes an invalid folder spec when I use
/ERRORLOG
or /OUTPUTLOG? Why??

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com




.

Relevant Pages

  • RE: SID Mapping More Info
    ... This is how i ran the command and down below are the results. ... >> corresponding ACE for the target domain principals while leaving the ... subinacl is recommended to reset the permissions in this ... >> security information about files, registry keys, and services, and transfer ...
    (microsoft.public.windows.server.migration)
  • RE: Data Migration
    ... If you want to replace NT ACLs with 2k3 ACLs, you can use SubInACL tool. ... " on the Microsoft Web site at ... you can use the following command below. ...
    (microsoft.public.windows.server.migration)
  • Re: Changing permission recursively
    ... The /subdirectories switch instructs subinacl.exe to deal ... subinacl subdirectories "E:\Documents and Settings\Mysubdir1\Mysubdir2" ... If you don't then the command will get very confused about ... John John. ...
    (microsoft.public.win2000.general)
  • Using Subinacl changing ownership
    ... windows 2000 file server using the 'subinacl' command but ...
    (microsoft.public.win2000.security)
  • RE: Delete unknown accounts SubInACL
    ... >Hi Jonas, ... >We need to use domain name in the syntax of SubInAcl ... >running SubInAcl tool or the folder you specified. ...
    (microsoft.public.windows.server.migration)