[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 480
  • Last Modified:

Assigning AD Domain Local Groups from the Command Line

I am attempting to create shares and assign permissions from the command line.(actually from a batch file)  When we used machine local groups I was able to use net share  and  cacls with no problems.  The syntax was as follows:

cacls e:\shares\FolderName /T /E /G ServerName\MachineLocalRWGroup:C  ServerName\MachineLocalROGroup:R ServerName\administrators:F

net share Sharename=e:\shares\FolderName /grant:Administrators,full /grant:MachineLocalRWGroup,change /grant:MachineLocalROGroup,read

We've since moved to using AD Domain Local Groups and I can't seem to get the syntax right (or it can't be done using net share and calcs)   Can someone out there please point me in the right direction?  

Regards

Brian


0
bg00
Asked:
bg00
1 Solution
 
Milind00Commented:
cacls works for domain groups but only in case of current domain. It does not allow us to specifiy domain. So in case name conflict with domain group and local group, it will not work.

Try using XACLS.
http://support.microsoft.com/?id=825751
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now