Link to home
Start Free TrialLog in
Avatar of I_play_with_DNA
I_play_with_DNA

asked on

Is there any easy way to assign NTFS permissions to multiple folders at the same time?

I have a large number of folders to which I need to give permissions to a new user.  The folders do not all reside in the same parent folder.  Is there an easy way for me to add read/write permissions to all of these folders for the user at the same time without having to go into the properties of each one individually?
Avatar of talker2004
talker2004
Flag of United States of America image

Is this a one time deal or is this going to be a process you have to follow each time you add a new user account?

You can script the operation using the command cacls. This allows you to modify the ACL or NTFS Permissions from the commnad line.

http://support.microsoft.com/kb/162786
Avatar of Lee W, MVP
Yes, reorganize your permission structure so that you only assign permissions to GROUPS and not to users.  That way, now and in the future, all you need to do is add the user to the group and you're done.  It's a lot faster from both a manual labor and resource changing standpoint.
I agree with leew. If you create a group and set the permissions approprately for your folders to allow the group you will only need to add a user to that group so that each new user has access to the directories.

Avatar of I_play_with_DNA
I_play_with_DNA

ASKER

@leew

Groups are not a useful solution in this case, as this person would be the only member of the group, so the amount of work would be the same.

@talker2004

I'll have to assign permissions for each new user but, unfortunately, they could be different (and unique) for each user.  I'm thinking it would take just as long to write a custom script specifying the folders as it would to just change the properties manually in Windows Explorer.

However, all the folders have the same name: MS Protected.  They're just stored in many subfolders throughout the file system.  Do you know of a way to search out all folders called MS Protected and apply specific permissions to them?
The only user until you need a second.  The rule is that with the exception of a user's home drive, you should always use groups.  What happens if the user leaves... now you have to change the permissions again...

Set it based on groups.  As for doing this, you would use CACLS in a script with a list of the folders you need to change.
ASKER CERTIFIED SOLUTION
Avatar of talker2004
talker2004
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
@leew

In the case of this user (and some others) the permissions are unique for each user so groups can't be used.  I know this is strange, but there are legal reasons for doing it this way.

@talker2004

The permissions for each MS Protected folder will be the same (i.e. always read/write) but specific users get access to specific MS Protected folders.  Sometimes it's only one user that can access a folder and sometimes a few users access a folder.  Generally it's based on projects and who is working on a particular project.

For now it seems like my best bet it to just do the search as you suggest, so that all MS Protected folders appear in a row, and then choose and modify the ones I want.  It will at least save me a lot of clicking through folder trees.
Sorry, I should have said above that the folder list is unique for each user, not the permissions.  Permissions are always read/write.