Solved

Windows Server 2000 / NTFS Permissions - Batch Changes

Posted on 2006-11-10
2
153 Views
Last Modified: 2010-04-11
Hi I've just started in a new organisation which has a curious I.T. setup that needs some serious work, the security is actually frightful internally.

Anyway... Enough with that, and on to my problem...

We're running Windows 2000 Server and the hard drive is formatted as NTFS.

I have a large group of users ( 100 users+ ) each user has their own folder inside a parent User folder. Their folder permissions are for Full Control for themselves and for the Administrators group. We're having some annoying troubles with users changing attributes on files. I wish to stop them from changing their attributes by taking away the right to "write attributes" on their folder and all sub-objects (files and folders).

What would be the best automated way to achieve my aim? Am I looking at programming a script? Or something more simple?
0
Comment
Question by:Tentux
2 Comments
 
LVL 14

Accepted Solution

by:
inbarasan earned 500 total points
ID: 17912927
Dear Tentux,

You can use Xcacls tool to add/remove NTFS permissions. Use it in a batch file and write the script.

Cheers!
0
 
LVL 3

Expert Comment

by:mahe2000
ID: 17913792
xcalcs willl help you to know which permissions they have in every folder and to set them up. change their permissions from full control to modify.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question