Avatar of serverops
serverops

asked on 

Adding additional ntfs Permissions onto all folders (and subfolders) even if inheritabled permissions are off

Hello,
i do have a file server here in the company wich growed over the last years worse and worse.
I found out that there are a lot of files/folders where also the admin  do not have access rights to. We need to delegate the rights to change the permissions to the helpdesk wich is for shure not admin onto the file server itself.
Now i do need to find a power shell command or a vb script (xcacls) or something like that, which is allowing me to ADD ADDITIONAL rights for a group or a user to all folders i do have onto a Volume or share or path .. whatever. The result shud be that the actually rights are not changed, just added with another modify rights to the specified usergroup.
The trick is it should be also working for such folders where the inheritable permission is set to off ..
Anyone can help me please ?
Many thanks in advance  ..
Windows Server 2008

Avatar of undefined
Last Comment
SStory
ASKER CERTIFIED SOLUTION
Avatar of SStory
SStory
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of serverops
serverops

ASKER

Thanks a lot so far .. the command is fine so far, but my problem is that the ntfs permissions are so messed up that even me as an local admin do not have the access rights therefore i do get the Access id denied message running the command..

also the cacls is just doing one folder and his subfolder . . but does not add the permissions onto the 3rd or 4th subfolder as wished when the inheritance is broken . .
Avatar of SStory
SStory
Flag of United States of America image

Well, if using the GUI you go into the advanced section, see who the owner is. you may have to take over. Make sure Admin is added and it is set to do so for all subfolders.
Avatar of serverops
serverops

ASKER

The Problem there is that even when i took the ownership he did not save it . .  strange . . what i did now is used xcacls.vbs (edited the supported version and added 6.1 for windows server 2008 r2) and run it with the following command:
xacls.vbs "datasource" /E /T /G "usernametoadd":F
after that i could see the owenership again (local admin) now trying to sort out different error messages from the command line like: Permissions denied and Path not found
Avatar of SStory
SStory
Flag of United States of America image

Sorry..I've been on vacation.... Glad it looks like you have solved the problem.
Windows Server 2008
Windows Server 2008

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo