?
Solved

Assigning AD Domain Local Groups from the Command Line

Posted on 2004-09-28
3
Medium Priority
?
478 Views
Last Modified: 2008-01-09
I am attempting to create shares and assign permissions from the command line.(actually from a batch file)  When we used machine local groups I was able to use net share  and  cacls with no problems.  The syntax was as follows:

cacls e:\shares\FolderName /T /E /G ServerName\MachineLocalRWGroup:C  ServerName\MachineLocalROGroup:R ServerName\administrators:F

net share Sharename=e:\shares\FolderName /grant:Administrators,full /grant:MachineLocalRWGroup,change /grant:MachineLocalROGroup,read

We've since moved to using AD Domain Local Groups and I can't seem to get the syntax right (or it can't be done using net share and calcs)   Can someone out there please point me in the right direction?  

Regards

Brian


0
Comment
Question by:bg00
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 4

Accepted Solution

by:
Milind00 earned 1400 total points
ID: 12178000
cacls works for domain groups but only in case of current domain. It does not allow us to specifiy domain. So in case name conflict with domain group and local group, it will not work.

Try using XACLS.
http://support.microsoft.com/?id=825751
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
Suggested Courses

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question