Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 277
  • Last Modified:

Folder / Subfolder Permissions Issues

Hello,

I'm having issues setting permissions for one of my clients. They have a large folder with over 2000 client subfolders.

They want everyone to see the folders, only specific users to create new folders, but all subfolders should be able to be edited.

For example:

M:/Clients/TestClient/2007/
M:/Clients/TestClient/2008/
M:/Clients/TestClient/2009/

Our users should not be able to create a folder directly under the "clients" folder but SHOULD be able create the next 2010 subfolder. A seperate group of users should be able to create additional client folders. Is this possible?
0
qualityip
Asked:
qualityip
  • 3
  • 2
1 Solution
 
Kent DyerCommented:
is each client or rather each client's login a number like the 2007 shown above?

Then, if that is the case, you will need to use a combination of DIR, FOR..IN..DO with XCALC to apply the perms you need..

Something like..

http://www.robvanderwoude.com/forshare.php

I think this what you are looking for..

Two things to keep in mind..
%%A the A is case-sensitive
%% is necessary in Batch Script..  From a command-line, you will want to use: %..


HTH,

Kent
0
 
qualityipAuthor Commented:
No,  the "TestClient" folder would be our customer. All of our users need to see this folder. The problem is that our users keep creating bad customer folders.

We want our users to be able to see and edit the data and create folders within the subfolders but not create new customer folders on the top level.
0
 
Kent DyerCommented:
Look at the use of CACLS then..

http://ss64.com/nt/cacls.html

Read carefully the Examples and there are examples for Read-only, Write, etc.

HTH,

Kent
0
When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

 
qualityipAuthor Commented:
I figured it out! First I applied the permissions to all child objects then removed inheritance and changed the first level.
0
 
qualityipAuthor Commented:
Okay, maybe not. The folder permissions are correct but all of the documents and data there is read-only.
0
 
David Johnson, CD, MVPOwnerCommented:
If you follow this video it will be exactly as you want

icacls clients output
clients
        WIN7VMWARE1\Standard User:(OI)(CI)(RX)
        BUILTIN\Administrators:(OI)(CI)(F)
        NT AUTHORITY\SYSTEM:(OI)(CI)(F)
Successfully processed 1 files; Failed processing 0 files
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now