a command promt tool to modify permission on large number of folders using variables and batch file

> ...modify for the %username% on their folders and subfolders
What does the share folders look like? Is each folder named after the user? e.g.

\\share\users\user1
\\share\users\user2
\\share\users\user3
...

Select all Open in new window

If so, make a .bat file of this and try it on a test folder:

@echo off
SETLOCAL ENABLEDELAYEDEXPANSION
REM Give user Modify right to their user folder.
REM User folder has same name as user

REM - IMPORTANT: Do on a test folder first!
REM - IMPORTANT: Running this code now then at a later time, e.g. a few weeks or months later
REM   may affect existing permissions. As always, USE WITH CARE.
REM - Change these variables to your needs: RootDir, DomName
REM - Makes a log file in your TEMP folder

set RootDir=d:\share\users
set DomName=domainname
set fnlog=%temp%\%~n0.log

>> "%fnlog%" echo %date% %time% BEGIN

if not exist "%RootDir%" (>> "%fnlog%" echo %date% %time% Missing %RootDir%& pause& goto :end)

pushd "%RootDir%"

REM - Disable inheritance and copy the existing ACEs
echo.
echo *** Disable inheritance and copy the existing ACEs
icacls "%RootDir%" /inheritance:d
if %errorlevel% neq 0 >> "%fnlog%" echo %date% %time% Error icacls "%RootDir%" Disable inheritance and copy the existing ACEs

REM - Remove users, including sub-folders. Else they would still be able to read... 
echo.
echo *** Remove users, including sub-folders. Else they would still be able to read... 
icacls "%RootDir%" /remove:g "Authenticated Users" /remove:g "domain users" /t /q
if %errorlevel% neq 0 >> "%fnlog%" echo %date% %time% Error icacls "%RootDir%" Remove users, including sub-folders

for /d %%a in (*) do (
  REM pushd %%a
  echo ------- "%%~fa"

  REM - Grant modify rights to Subfolders and files only
  echo.
  echo *** Grant modify rights to Subfolders and files only
  >> "%fnlog%" echo "%%~fa" "%DomName%\%%~na" Grant modify rights to Subfolders and files
  icacls "%%~fa" /grant "%DomName%\%%~na":^(OI^)^(CI^)M /q
  if %errorlevel% neq 0 >> "%fnlog%" echo %date% %time% Error icacls "%%~fa" "%DomName%\%%~na" Grant modify rights to Subfolders and files
  REM popd
)

:end
>> "%fnlog%" echo %date% %time% END
popd

Select all Open in new window