?
Solved

How to backup ACL permissions and restore its in Windows 2003?

Posted on 2012-03-13
7
Medium Priority
?
1,652 Views
Last Modified: 2012-03-14
Hi,

Recently by mistake the whole securities groups have been removed from parent folder and child folder in Windows 2003 file server.

How can I backup ACL permissions and restore if it happen again? Is it possible?
0
Comment
Question by:SAM2009
7 Comments
 
LVL 26

Expert Comment

by:Leon Fester
ID: 37717822
Most backup software stores the ACL when you backup the folders.
Restore the folders from backup with the permissions.
0
 
LVL 1

Author Comment

by:SAM2009
ID: 37717860
The prob with the folder restoration option is the lack of space on the server.
0
 
LVL 25

Expert Comment

by:yo_bee
ID: 37717876
do you have a Powershell installed.

If so you can try something like this
Get-ChildItem C:\Scripts -recurse | ForEach-Object {Get-Acl $_.FullName} | Export-csv <FILENAME>

Open in new window

0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 1

Author Comment

by:SAM2009
ID: 37718065
No powershell is not installed... and will be difficult to get it install. Thanks anyway for suggestion.
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 37718588
Try dumpsec from systemtools, it can export the permissions on the desired objects.
http://www.somarsoft.com/
0
 
LVL 1

Accepted Solution

by:
matthew_kittle earned 2000 total points
ID: 37719225
If you are using Windows Server 2003 SP2, you can use the Microsoft iCacls.exe utilitiy. I believe it is installed with this service pack and resides in the System32 folder.

To backup: icacls c:\folder\* /save aclfile /t

To restore: icacls c:\folder\ /restore aclfile

If you are using Windows Server 2003 prior to SP2 then you could use the Microsoft SubInAcl tool (subinacl download), although this is more complex to use.

Another tool you could use prior to SP2 is FileAcl (FileAcl homepage) which is a non-Microsoft utility with a reasonably straight forward command line.
0
 
LVL 1

Author Closing Comment

by:SAM2009
ID: 37723340
Thank you very much for your recommendation!
0

Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

589 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question