Solved

Assigning AD Domain Local Groups from the Command Line

Posted on 2004-09-28
3
476 Views
Last Modified: 2008-01-09
I am attempting to create shares and assign permissions from the command line.(actually from a batch file)  When we used machine local groups I was able to use net share  and  cacls with no problems.  The syntax was as follows:

cacls e:\shares\FolderName /T /E /G ServerName\MachineLocalRWGroup:C  ServerName\MachineLocalROGroup:R ServerName\administrators:F

net share Sharename=e:\shares\FolderName /grant:Administrators,full /grant:MachineLocalRWGroup,change /grant:MachineLocalROGroup,read

We've since moved to using AD Domain Local Groups and I can't seem to get the syntax right (or it can't be done using net share and calcs)   Can someone out there please point me in the right direction?  

Regards

Brian


0
Comment
Question by:bg00
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 4

Accepted Solution

by:
Milind00 earned 350 total points
ID: 12178000
cacls works for domain groups but only in case of current domain. It does not allow us to specifiy domain. So in case name conflict with domain group and local group, it will not work.

Try using XACLS.
http://support.microsoft.com/?id=825751
0

Featured Post

MS Dynamics Made Instantly Simpler

Make Your Microsoft Dynamics Investment Count  & Drastically Decrease Training Time by Providing Intuitive Step-By-Step WalkThru Tutorials.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question