Solved

Using Subinacl

Posted on 2004-09-29
2
599 Views
Last Modified: 2013-12-04
Hi

I am trying to create a script to give users full access to the C: drive of a machine, I have managed to get that right but also need to know if i can get Subinacl
to exclude the c:\windows\system32 folder from being changed to full control and just stay the same.

Thanks

Leon
0
Comment
Question by:RMBTechnology
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 50 total points
ID: 12197417
The easiest thing to do, would probably be to have 3 parts to the script
1) print the current permissions ( owners etc,,,if necessary) of the dir you wish to remain the same
2) change all dir's to Everyone F C
3) use the values that you recoded for the system32 folder (and sub-folders?), and apply them back to that directory (and sub-folders?)

You may want to check out XcACLS.exe also
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/xcacls-o.asp
-rich
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question