It absolutely will do what you want done.
xcacls x:\users /T /E /G domain\quotauser:F /Y
^ ^ ^ ^ ^ ^ ^
| | | | | | L replace without verify (i.e.
don't asK)
| | | | | L full control (C = Change, R =
Read, etc)
| | | | L quota user name
| | | L Grant Permissions (or /R to revoke)
| | L Edit perms (rather than replace)
| L Apply to the Tree (ie named directory and all subdirs)
L Directory to modify
Roger
--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
-----Original Message-----
From: Abbiss, Mark [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 8:25 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Editing directory permissions
well looking at the minimal help file that comes with Xcacls I am not 100%
certain if it does or does not do what I want. Subinacl certainly does not
appear to do it.
Let me elaborate
We have users homeshares in the following structure
x:\users\
---- \USER1
---- \USER2
---- \USER3
---- \USER.
---- \USERn
The top level directory has permissons for administrators, backup operators
and for our quota management software.
Unfortunately, when some of the´user directories underneath were created
they were not created with inheritence set. The consequence is that the
quota software was not given rights to set new values on these user
directories.
I would like to simple run a command that will go down all the user
directories and ADD the quota software account to the permissions for each
user. I would like all the current security settings to remain untouched.
Have I misunderstood the xcacls help and it will in fact be able to do this
??
Or can I use another utility ?
Many thanks.
-----Original Message-----
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Mittwoch, 17. September 2003 14:14
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Editing directory permissions
xcacls and subinacl, both from the reskit, would be where I start. Is it
just a question of syntax or is it not capable of doing what you need done?
If those two wouldn't fit the bill, I'd probably write a script to handle
it. Something like Hyena might also do the trick, too.
Roger
--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
-----Original Message-----
From: Abbiss, Mark [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 5:55 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Editing directory permissions
Please can anyone recommend a good utility (not xcacls) that will help me
add additional security permissons to a directory structure on one of our
W2K servers. I want the existing ACL info to remain but want to append
another set.
Many thanks,
Mark
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
