Solved

icacls command

Posted on 2013-01-22
2
784 Views
Last Modified: 2013-01-23
I am using two icacls command.  If i do a restore, it doesnt stop inheritance on certain folders that the original  source had.  Here are the two commands.  What other parameters do i need to correct this?

iCACLS D:\data /save c:\logfile.txt /t /c


iCACLS D:\ /restore c:\logfile.txt
0
Comment
Question by:aplona
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 40

Expert Comment

by:footech
ID: 38807715
if you want to remove all ACEs that are inherited, use the /inheritance:r switch.
0
 
LVL 40

Accepted Solution

by:
Subsun earned 225 total points
ID: 38807767
iCACLS should preserve the inheritance.. Are you getting any error while saving or restoring the ACL's?
Ref : http://social.technet.microsoft.com/wiki/contents/articles/408.how-to-back-up-and-restore-ntfs-and-share-permissions.aspx

Also verify the permission on the folder and sub folders..

Excerpt from ref : http://ss64.com/nt/icacls.html
Using iCACLS

    To edit a file you must already have the "Change" ACL (or be the file's owner)
    To use the iCACLS command to change the permissions of a file requires "FULL Control" (or be the file's owner)
    File "Ownership" will always override all ACL's - you always have Full Control over files that you create.

Open in new window

0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to prepare an HTML email signature template file containing dynamic placeholders for users' Azure AD data. Furthermore, it explains how to use this file to remotely set up a department-wide email signature policy in Office …
A brief introduction to what I consider to be the best editor for PowerShell.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question