• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3208
  • Last Modified:

Help with ICACLS please

Hi :)

I'm having an annoying problem with directory security on Windows Server 2003 Standard Edition SP2. I'm trying to remove the local "Users" security group  from a large folder structure of thousands of files and folders. The security group <servername>\Users to be specific.

I tried using CACLS with the command CACLS * /E /T /C /R Users but it sometimes hits strange files that give the error " the data area passed to a system call is too small" and it halts the process and stops waiting at the error. I tried the /C switch but this didn't work because that only continues if it's an access denied error.

I then read that ICACLS is a more advanced version and allows the switch /C which continues on all file errors. Great I thought, so I ran the command ICACLS * /remove Users /T /C which it seems to process fine but it doesn't actually remove the said Users group from the security permissions.

Any ideas/pointers as to what I could be doing wrong?

1 Solution
Try it with subinacl, a Resource Kit tool (install the Resource Kit first for the subinacl help, then the corrected version of subinacl, because the one from the ResKit is buggy). subinacl.exe is a stand-alone tool, you can copy it from the install folder to other machines without installing the complete ResKit if you don't want to.
The following command should do the trick (try with a test folder first!):

subinacl /subdirectories E:\Root\*.* /suppresssid=Users

Windows Server 2003 Resource Kit Tools

SubInACL (SubInACL.exe)
itmtsnAuthor Commented:
Thanks very much. Worked a treat :)

Featured Post

Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now