Administrative Permissions for folders and subfolders

How can I add administrative permissions to a folder and all of it's subfolders?  Doing this manually would take a long time, is there a command that will do it automatically?  Thanks.
ITINITIATIVESAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

XionathCommented:
Right Click on the folder and select properties, choose Permissions(security), assign the user or group you want to the folder, then press the advanced button and select the lowest box (i dont have an english version but it should be something like
"permissions for all subfolders etc etc" this will make all subfolders have the same permission as the source folder..(inherited rights)
0
Madison PerkinsConsultantCommented:
Right click on root folder you need to change permissions. Select Security Tab, advanced, and check the "replace permission entries on all child objects....."
0
Madison PerkinsConsultantCommented:
dang Xion.  beat me there by 1 minute.
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

XionathCommented:
sorry madperk :)
0
ITINITIATIVESAuthor Commented:
Thanks for your help.  Just a quick question.  If i add administrator the the very top folder in the file stucture and then click "replace permission entires on all child objects.." will that change the existing permissions of the subdirectories (bad) or simply just add administrator to the subdirectories (good).  I want to make sure of this because I don't want to screw up their current configuration, I just need access to files.  Thanks!
0
ITINITIATIVESAuthor Commented:
Anyone??
0
Madison PerkinsConsultantCommented:
Yes it will replace the permissions. Example coming in the next post.
0
Madison PerkinsConsultantCommented:
Folder structure
\USERS\>Domain Admins>full control
             \SALLY\ > SallyFull Controll >SYSTEM-Full>Creater Owner>Special | allow/replace unchecked
             \BOBBY\>BobbyFullControl>SYSTEM-Full>Creater Owner>Special | allow/replace unchecked
0
Madison PerkinsConsultantCommented:
In the above example you can do a couple of things.  you could check the allow inherit on the sally and bobby folder which would let the domain admins group have full control without replacing the existing permissions on the sally and bobby folders.

If you were to check the allow inherit and replace the sally and bobby folder would have the same rights as the USERS folder. effectivly removing the explicit rights on the sally and bobby folders.  

take a look at Xcacls script from microsoft.  very powerful command line tool for right modification.  has some options that go beyound the GUI..

http://support.microsoft.com/default.aspx/kb/318754
0
Madison PerkinsConsultantCommented:
One little bit of advice on wading into rights modifications for the first time.   Do a selective restore with your backup software of the folder and subfolders to a different folder and play with it there.  With the questions that you have asked it, sounds like this might be something that you are not very familiar.  If this is the HOMEDRIVE folder for your users and you end up with an issue where people cannot get to their private documents.  There is nothing like goofing rights and having to explain what happened 100 times to each user.  

I am not bashing you on this.  I did that about ten years ago. I think my face was red for a week.  Live and learn.
0
ITINITIATIVESAuthor Commented:
Thanks madperk.  Fortunately for me I'm asking lots of questions before I make any modifications!  I understand how frustrating that must have been for you though. So If I do a restore to an alternate location it will reset the permissions? Thanks in advance for everyone who has helped thus far.
0
Madison PerkinsConsultantCommented:
it should keep all of the permissions intact.  what backup software are you using?  NTBACKUP, BackupExec?
0
ITINITIATIVESAuthor Commented:
iBackup..3rd party software.
0
Madison PerkinsConsultantCommented:
yep don't have a clue on that one.  use NTBACKUP and backup you folder to a file backup set and then turn around a perform a restore to an alternate location.  you won't have to wait for the info to come down from you "offsite backup". It has been a while since i have used NTBACKUP,  i use and prefer backup exec. running a quick test now.  will post results and steps in a few minutes.  
0
ITINITIATIVESAuthor Commented:
Ok, great.  Thanks madperk.
0
Madison PerkinsConsultantCommented:
Backup using ntbackup and select a location that you have enough disk space for the backup file this will be roughly the same size as the data. create a new folder called restore.  inside restore create a folder called test.  change the security settings in test to not allow for security inheritable.... Use the restore wizard and select your backup file.  at the end of the wizard select the advanced button. (very important) the advanced button is where you can select an alternate location. in the advanced restore options make sure "Restore security settings is selected.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Madison PerkinsConsultantCommented:
opps the alternate location should be restore\test for the restore process.
0
ITINITIATIVESAuthor Commented:
Thanks for all your help.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.