Inbox360
asked on
how can i get xcopy to copy folders on a mapped drive on domain?
heres the problem i have new w2k3 domain and testing out new file structure. i have a folder that has a script in it that when ran by certain users it creates a whole bunch of folders(already setup somewhere else) with files in it and copies over permissions too. i am on a test user for one of my groups and the script will not run. this is my script.
xcopy Z:\protected Z:\Projects\ATT_BW /e /i /o /y /k /c
the drive that gets mapped to user is z: drive and the protected folder and projects are on the root. in the att_bw folder is this line in a .cmd file. heres the error i get.
Access denied
Unable to create directory - Z:\Projects\ATT_BW
0 File(s) copied
I cannot figure out why when i logon and get mapped drive. i go into z and try it. it runs but i am the domain admin. when i try the test user, i get that error, any ideas? thanks.
xcopy Z:\protected Z:\Projects\ATT_BW /e /i /o /y /k /c
the drive that gets mapped to user is z: drive and the protected folder and projects are on the root. in the att_bw folder is this line in a .cmd file. heres the error i get.
Access denied
Unable to create directory - Z:\Projects\ATT_BW
0 File(s) copied
I cannot figure out why when i logon and get mapped drive. i go into z and try it. it runs but i am the domain admin. when i try the test user, i get that error, any ideas? thanks.
Btw... This needs to be on root of "Z:"
ASKER
im pretty sure its a permissions issue. on the projects folder i gave the group engineering full control, still no good. made user admin from builtin still no good. so maybe giving intenna\users read access to protected folder would do it but then there in own OU so i put in auth users have full control?? i just gave the intenna share which is the z drive auth users have modify. not working. tried giving the group that the test user is in modify to intenna root share which is z drive and still no. ideas? how can i find out why?
I suggest for Testing
Give Domain Users FC via Share
Give The group FC via NTFS
do you mind doing an xcacls on the root?
Give Domain Users FC via Share
Give The group FC via NTFS
do you mind doing an xcacls on the root?
ASKER
sure anything to fix it. what is xcacls? how do i do it
ASKER
i looked into it and am trying it. anything specific i need to try?
ASKER
heres my output for the d: drive of the server
d:\ BUILTIN\Administrators:(OI
NT AUTHORITY\SYSTEM:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
BUILTIN\Users:(OI)(CI)R
BUILTIN\Users:(CI)(special
FILE_APPEND_DATA
BUILTIN\Users:(CI)(IO)(spe
FILE_WRITE_DATA
Everyone:R
d:\ BUILTIN\Administrators:(OI
NT AUTHORITY\SYSTEM:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
BUILTIN\Users:(OI)(CI)R
BUILTIN\Users:(CI)(special
FILE_APPEND_DATA
BUILTIN\Users:(CI)(IO)(spe
FILE_WRITE_DATA
Everyone:R
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
gave users of domain full and now the user can run script. thanks. now i gotta lock it down and play with it. thanks
That looks incorrect.
Make sure on the root you have
Write Folders on child containers
should look something like
BUILTIN\Users:(OI)(CI)(spe
READ_CONTROL
SYNCHRONIZE
FILE_GENERIC_READ
FILE_GENERIC_EXECUTE
FILE_READ_DATA
FILE_WRITE_DATA
FILE_APPEND_DATA
FILE_READ_EA
FILE_EXECUTE
FILE_READ_ATTRIBUTES
Make sure on the root you have
Write Folders on child containers
should look something like
BUILTIN\Users:(OI)(CI)(spe
READ_CONTROL
SYNCHRONIZE
FILE_GENERIC_READ
FILE_GENERIC_EXECUTE
FILE_READ_DATA
FILE_WRITE_DATA
FILE_APPEND_DATA
FILE_READ_EA
FILE_EXECUTE
FILE_READ_ATTRIBUTES
ASKER
does it matter if i took off inheritance on the intenna folder which is on root of d drive?
The test user needs to have at least change via share and Modify via NTFS