icacls to assign permissions to ALL subfolders, even folders not inheriting access?

I am using the following command to add a group to the ACL for very large directories. The problem I am having is some of the folders have disabled access inheritance and have explicit access assigned and this group doesn't get added to that folder with the following command.

icacls.exe U:\*.* /grant DOMAIN\GroupName:(OI)(CI)F /C /T

Am I missing a switch or something? Is there a way to force it to add the group to all folders regardless if they are inheriting access? Or is there something else that is preventing the group from being applied to the folder?

Thanks,
REIUSAAsked:
Who is Participating?
 
Ben Personick (Previously QCubed)Lead Network EngineerCommented:
you have used the container inherit and object inherit options in place which will allow the inheritance blocking you put in place to over-ride your changes.

you can change the command as follows and you should be fine.

Also note that if you are trying to change inheritance to be enabled you would use

icalcs "U:\*" /inhereitance:e /T /C

icacls "U:\*" /grant:r Domain\Group:f /C /T

Open in new window

0
 
REIUSAAuthor Commented:
Thanks, that looks like it is working.

Something else I noticed is, if I try to apply it to c:\F1\F2\* the group doesn't get added to F2. is there a way to make it apply to F2 also? there are many other sub folders under F1 that I do not want to apply the group to, just F2 and everything below it.
0
 
Ben Personick (Previously QCubed)Lead Network EngineerCommented:
Try doing one of these two variations for the path


“C:\F1\F2“

“C:\F1\F2\“

I think option 1 will work
0
 
REIUSAAuthor Commented:
Cool, thanks. I will try that.
0
 
Ben Personick (Previously QCubed)Lead Network EngineerCommented:
You're welcome glad I could help =)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.