Solved

Windows Server 2000 / NTFS Permissions - Batch Changes

Posted on 2006-11-10
2
152 Views
Last Modified: 2010-04-11
Hi I've just started in a new organisation which has a curious I.T. setup that needs some serious work, the security is actually frightful internally.

Anyway... Enough with that, and on to my problem...

We're running Windows 2000 Server and the hard drive is formatted as NTFS.

I have a large group of users ( 100 users+ ) each user has their own folder inside a parent User folder. Their folder permissions are for Full Control for themselves and for the Administrators group. We're having some annoying troubles with users changing attributes on files. I wish to stop them from changing their attributes by taking away the right to "write attributes" on their folder and all sub-objects (files and folders).

What would be the best automated way to achieve my aim? Am I looking at programming a script? Or something more simple?
0
Comment
Question by:Tentux
2 Comments
 
LVL 14

Accepted Solution

by:
inbarasan earned 500 total points
ID: 17912927
Dear Tentux,

You can use Xcacls tool to add/remove NTFS permissions. Use it in a batch file and write the script.

Cheers!
0
 
LVL 3

Expert Comment

by:mahe2000
ID: 17913792
xcalcs willl help you to know which permissions they have in every folder and to set them up. change their permissions from full control to modify.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Examines three attack vectors, specifically, the different types of malware used in malicious attacks, web application attacks, and finally, network based attacks.  Concludes by examining the means of securing and protecting critical systems and inf…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question