Solved

Folder Rights

Posted on 2008-06-12
6
209 Views
Last Modified: 2011-09-20
HI,
i have created a few security groups in my AD
group 1
group 2
group 3
group 4
i need to apply permissions to m sublfolders with the security groups i have created.
my folder struture is like this
c:\main folder\subfolder\inner sub\
the main folder should have read access to all the users in my domain
the subfolder has the permission same as the main folder
the inner sub also has only read rights for all my users .
inside the inner sub i have 10 folder each with different rights
say folder 1 - only group 1 and group 2 has read access an group 3 and 4 has write access.
say folder 1 - only group 2 and group 4 has read access an group 1 and 3 has write access.
 
i have many folder to do.. how can i run a script and change it automatocally.

Cheers:)
Kamal
0
Comment
Question by:kamalgopi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 16

Expert Comment

by:speshalyst
ID: 21768636
do you have a definite pattern of how these folder permissions will look like?
Other wise i dont see how you can automate it..
0
 
LVL 16

Expert Comment

by:speshalyst
ID: 21768648
you might wanna try this tool...  there is a lotta documentiona and expamples..

http://setacl.sourceforge.net/

Hope it heps
0
 
LVL 11

Author Comment

by:kamalgopi
ID: 21768957
i have clearly given everything on my post. which part u cannot understand.
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 
LVL 16

Expert Comment

by:speshalyst
ID: 21769590
This part..
inside the inner sub i have 10 folder each with different rights
say folder 1 - only group 1 and group 2 has read access an group 3 and 4 has write access.
say folder 1 - only group 2 and group 4 has read access an group 1 and 3 has write access.

Can you explain futher ..
0
 
LVL 15

Accepted Solution

by:
fishadr earned 500 total points
ID: 21769849
There are two free utilities from Microsoft which will do this for you:
XCACLS.EXE
http://support.microsoft.com/kb/318754

or SUBINACL.EXE:
http://support.microsoft.com/kb/265360/en-us
http://www.analogduck.com/main/subinacl#Examples

XCACLS
============================================
So first grant them full permissions by using...
xcacls C:\<path>\*.* /G Group1:F /E

permisisons:
 R  Read
 C  Change (write)
 F  Full control
 P  Change Permissions (Special access)
 O  Take Ownership (Special access)
 X  EXecute (Special access)
 E  REad (Special access)
 W  Write (Special access)
 D  Delete (Special access)

SUBINACL
====================================================
In this example is to grant Domain1\User1 the PACEs of Execute and Take Ownership on the file C:\Test.txt. Type the following at the command line:

subinacl /file C:\TEST.TXT /grant=domain1\user1=xo

PACE       Description
F       Full Control
C       Change
R       Read
P       Change Permissions
O       Take Ownership
X       eXecute
E       Read eXecute
W       Write
D       Delete

The following has info on both:
http://support.microsoft.com/kb/265360/en-us

It is pretty easy to use. Give it a try and post back if you have any issues
0
 
LVL 15

Expert Comment

by:fishadr
ID: 21887852
How you getting on with this one - Need any more help?
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question