FSMainFolder - Files Server Structure Automation Tool

Shaun VermaakCOG Lead Engineer
My name is Shaun Vermaak and I have always been fascinated with technology and how we use it to enhance our lives and business.
Edited by: ☠ MASQ ☠
This command line tool can be used to quickly create a folder structure for a file server. Not only does it assist in creating the folders, it creates the appropriate groups and assigns the correct permission.


FSMainFolder is a tool I developed to create a folder structure in a controlled and standardized way.


  • Main folder: A folder created by the file server administrator that define the main structure. Main folders are the only folder on which permissions are assigned to. Main folders have Deny Delete rights assigned to prevent users from deleting these folders
  • Root main folder: Does not inherit parent folder permission. Non-root main folders inherit permissions from parent
  • User folder: A folder created by end-users to structure within the main structure. End-users can freely create and delete these folders. Folders do not have Creator/Owner Full Control specified which prevents end-users from removing permissions specified by file server administrator


  • Automatically create the folder with Deny Delete rights
  • Can create root and subfolders
  • Can be configured to create an Active Directory group dedicated for users with change and/or read permissions and assigns the correct permission
  • Assigns the specified user as the owner of the group
  • Assigns the specified description on the newly created Active Directory groups
  • Assigns a custom icon clearly identify main folders


1) Download the command line version of SetACL (https://helgeklein.com/download) and extract to a folder on your file server. The tool will be updated to the use and include the COM version if the author allows me.

2) Download FSMainFolder tool (http://blog.ittelligence.com/wp-content/uploads/2018/06/FSMainFolder.zip) and extract to a folder on your file server.

3) Run Configurator.exe (Configurator Editor).

a) On the Encrypt tab, enter the password for the account that will be performing the cleanup task. Encrypt it with key 9s7P353RJAUrHSVe and record the encrypted password.

b) On the Settings tab, enter the distinguished name, fully qualified domain name, NetBIOS, and username and the encrypted password recorded in step 3a.

c) Specify option for how to name groups. This includes the organizational unit, prefix, suffix and tiebreaker length.

d) Specify the path where you extracted SetACL.exe to.


Command parameters are supplied to control the main folder creation process


For example, the following will create a main folder D:\CorporateData\Sales, a change, and a read-only group and assign the correct permissions. The groups created will have JDOE as the owner and the description will be "This folder is assigned to the Sales Team"

FSMainFolder.exe "D:\CorporateData" Sales "This folder is assigned to the Sales Team" JDOE TRUE TRUE TRUE

Demo Execution

Running the command

Resulting folders

Resulting groups

I hope you found this tutorial useful. You are encouraged to ask questions, report any bugs or make any other comments about it below.


Note: If you need further "Support" about this topic, please consider using the Ask a Question feature of Experts Exchange. I monitor questions asked and would be pleased to provide any additional support required in questions asked in this manner, along with other EE experts...


Please do not forget to press the "Thumb's Up" button if you think this article was helpful and valuable for EE members.


It also provides me with positive feedback. Thank you!

Shaun VermaakCOG Lead Engineer
My name is Shaun Vermaak and I have always been fascinated with technology and how we use it to enhance our lives and business.

Comments (0)

Have a question about something in this article? You can receive help directly from the article author. Sign up for a free trial to get started.