Need a tool to clear share permissions on Windows NT

Posted on 2008-02-12
Medium Priority
Last Modified: 2013-12-21
File Server: WINDOWS NT Server

I have a Windows NT Server which also acts as a file server. We have about 200 user home directories which are individually shared. Currently we are migrating the domain and the user accounts have been created in the new domain. My boss has asked me to reassign the share level permissions on these 200 home folders so that

1. Only the user has change access (account from Old domain)
2. Domain Admins have Full access (from old domain)
3. The user has change access (accout from new domain)
4. Delegated Group in AD (from new domain) has Full access

Now the trouble is, a lot of these shares have incosistent permissioning. The users had Full control earlier and because of that they started giving permissions to others. So its a real mess. I have the old user and new user accounts from 2 domains in a text file, I have all the share names and paths in the text file and what I want to do is go one by one on each share and clear all the ACE from shares. Then assign the above 4 ACEs. Obviously I want to script this operation however my problem is this

RMTSHARE - works good for assigning and removing specific SIDs but desn't give me to option to clear all ACEs from share.

SUBINACL - I used the version 5. something and it doesn't work on NT. the earlier version doesn't seem to have the /SHARE option.

So how what tool can I use to clear all ACEs in share ? (Note: This question is for share permissions only, please donot reply with solutions like Xcacls etc. I'm not doing anything on NTFS side right now)
Also I dodnot need the script. If anyone knows any tool I can use to clear ACEs? thats what I would like to know. Thanks, Gaurang
Question by:gtrivedi
1 Comment

Accepted Solution

gtrivedi earned 0 total points
ID: 20882709
ok I think I got the solution. Simply using the /remove switch will clear all ACEs but will add everyone to Full control. So having a combination will achive what is required.



Featured Post

WEBINAR: GDPR Implemented - Tips & Lessons Learned

Join the WatchGuard team on Thursday, March 29th as we recount some valuable lessons learned in weighing the needs of a business against the new regulatory environment, look ahead at the two months left before implementation, and help you understand the steps you can take today!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Dropbox has a relatively new feature called Smart Sync.  This feature allows Dropbox Professional (not plus) and Dropbox Business (if enabled) users to store information in Dropbox WITHOUT storing any files on their computer.
Seizing the Operation Master Roles in Windows Server 2016 in case of FSMO holder failure.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question