Solved

Assigning AD Domain Local Groups from the Command Line

Posted on 2004-09-28
3
477 Views
Last Modified: 2008-01-09
I am attempting to create shares and assign permissions from the command line.(actually from a batch file)  When we used machine local groups I was able to use net share  and  cacls with no problems.  The syntax was as follows:

cacls e:\shares\FolderName /T /E /G ServerName\MachineLocalRWGroup:C  ServerName\MachineLocalROGroup:R ServerName\administrators:F

net share Sharename=e:\shares\FolderName /grant:Administrators,full /grant:MachineLocalRWGroup,change /grant:MachineLocalROGroup,read

We've since moved to using AD Domain Local Groups and I can't seem to get the syntax right (or it can't be done using net share and calcs)   Can someone out there please point me in the right direction?  

Regards

Brian


0
Comment
Question by:bg00
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 4

Accepted Solution

by:
Milind00 earned 350 total points
ID: 12178000
cacls works for domain groups but only in case of current domain. It does not allow us to specifiy domain. So in case name conflict with domain group and local group, it will not work.

Try using XACLS.
http://support.microsoft.com/?id=825751
0

Featured Post

Enroll in June's Course of the Month

June's Course of the Month is now available! Every 10 seconds, a consumer gets hit with ransomware. Refresh your knowledge of ransomware best practices by enrolling in this month's complimentary course for Premium Members, Team Accounts, and Qualified Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question