Using Subinacl


I am trying to create a script to give users full access to the C: drive of a machine, I have managed to get that right but also need to know if i can get Subinacl
to exclude the c:\windows\system32 folder from being changed to full control and just stay the same.


Who is Participating?
Rich RumbleConnect With a Mentor Security SamuraiCommented:
The easiest thing to do, would probably be to have 3 parts to the script
1) print the current permissions ( owners etc,,,if necessary) of the dir you wish to remain the same
2) change all dir's to Everyone F C
3) use the values that you recoded for the system32 folder (and sub-folders?), and apply them back to that directory (and sub-folders?)

You may want to check out XcACLS.exe also
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.