Remove a security group from all folders in a machine.


I need to Remove a security group from all folders in a machine.

This group is a member of the security permissions so need to remove 1 specific group
LVL 11
Who is Participating?
You can use subinacl.exe to do that. Since you probably have the W2k3 Resource Kit Tools installed anyway, you can use the help from there, but download and install the current version of subinacl, the one from the Resource Kit is buggy. Running subinacl /? should return "SubInAcl version 5.2.3790.1180" as the first line.
The command would be (replace the "C:\*.*" with the drive or path on which to start):
subinacl /subdirectories C:\*.* /suppresssid=DOMAIN1\USER1

Download details: SubInACL (SubInACL.exe)SubInACL is a command-line tool that enables administrators to obta
A more complete question might yield better result for answers.

Are you talking about a local group or a domain group?

Either way, you can't really do this from the group side. Instead, you have to go to each folder you want to change, and remove permissions for the group from the folder security tab. If you are only doing this for one machine, and if you need to do it for ALL folders on the machine, perhaps your better solution would be to delete the group entirely. Of course if it's a domain group, and the group needs permissions to other machines, then that won't work.
bsharathAuthor Commented:
The group is a domain group.This group is added to many machines in my network...
Then the only solution I can think of at the local machine is to remove it manually. You may be able to find some utilities that will scan your machine's ACLs to find out where that group has permissions, but let's also see if anyone else chimes in with better solutions.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.