Help with ICACLS please

Posted on 2007-10-18
Last Modified: 2013-12-04
Hi :)

I'm having an annoying problem with directory security on Windows Server 2003 Standard Edition SP2. I'm trying to remove the local "Users" security group  from a large folder structure of thousands of files and folders. The security group <servername>\Users to be specific.

I tried using CACLS with the command CACLS * /E /T /C /R Users but it sometimes hits strange files that give the error " the data area passed to a system call is too small" and it halts the process and stops waiting at the error. I tried the /C switch but this didn't work because that only continues if it's an access denied error.

I then read that ICACLS is a more advanced version and allows the switch /C which continues on all file errors. Great I thought, so I ran the command ICACLS * /remove Users /T /C which it seems to process fine but it doesn't actually remove the said Users group from the security permissions.

Any ideas/pointers as to what I could be doing wrong?

Question by:itmtsn
    LVL 82

    Accepted Solution

    Try it with subinacl, a Resource Kit tool (install the Resource Kit first for the subinacl help, then the corrected version of subinacl, because the one from the ResKit is buggy). subinacl.exe is a stand-alone tool, you can copy it from the install folder to other machines without installing the complete ResKit if you don't want to.
    The following command should do the trick (try with a test folder first!):

    subinacl /subdirectories E:\Root\*.* /suppresssid=Users

    Windows Server 2003 Resource Kit Tools

    SubInACL (SubInACL.exe)

    Author Comment

    Thanks very much. Worked a treat :)

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Join & Write a Comment

    This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
    Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    730 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now