[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

How to backup ACL permissions and restore its in Windows 2003?

Posted on 2012-03-13
7
Medium Priority
?
1,609 Views
Last Modified: 2012-03-14
Hi,

Recently by mistake the whole securities groups have been removed from parent folder and child folder in Windows 2003 file server.

How can I backup ACL permissions and restore if it happen again? Is it possible?
0
Comment
Question by:SAM2009
7 Comments
 
LVL 26

Expert Comment

by:Leon Fester
ID: 37717822
Most backup software stores the ACL when you backup the folders.
Restore the folders from backup with the permissions.
0
 
LVL 1

Author Comment

by:SAM2009
ID: 37717860
The prob with the folder restoration option is the lack of space on the server.
0
 
LVL 24

Expert Comment

by:yo_bee
ID: 37717876
do you have a Powershell installed.

If so you can try something like this
Get-ChildItem C:\Scripts -recurse | ForEach-Object {Get-Acl $_.FullName} | Export-csv <FILENAME>

Open in new window

0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
LVL 1

Author Comment

by:SAM2009
ID: 37718065
No powershell is not installed... and will be difficult to get it install. Thanks anyway for suggestion.
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 37718588
Try dumpsec from systemtools, it can export the permissions on the desired objects.
http://www.somarsoft.com/
0
 
LVL 1

Accepted Solution

by:
matthew_kittle earned 2000 total points
ID: 37719225
If you are using Windows Server 2003 SP2, you can use the Microsoft iCacls.exe utilitiy. I believe it is installed with this service pack and resides in the System32 folder.

To backup: icacls c:\folder\* /save aclfile /t

To restore: icacls c:\folder\ /restore aclfile

If you are using Windows Server 2003 prior to SP2 then you could use the Microsoft SubInAcl tool (subinacl download), although this is more complex to use.

Another tool you could use prior to SP2 is FileAcl (FileAcl homepage) which is a non-Microsoft utility with a reasonably straight forward command line.
0
 
LVL 1

Author Closing Comment

by:SAM2009
ID: 37723340
Thank you very much for your recommendation!
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question