I used this syntax and the process began. It began changing ACL on both files AND directories !!! Is it possible to only change directories ?
However, it abruptly stopped with the message, "The data area passed to a system call is too small." I have searched for this error but can find nothing about it in connection with using xcacls ?!? Any other utilities out there :-) !?! Many thanks -----Original Message----- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 17. September 2003 14:51 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Editing directory permissions It absolutely will do what you want done. xcacls x:\users /T /E /G domain\quotauser:F /Y ^ ^ ^ ^ ^ ^ ^ | | | | | | L replace without verify (i.e. don't asK) | | | | | L full control (C = Change, R = Read, etc) | | | | L quota user name | | | L Grant Permissions (or /R to revoke) | | L Edit perms (rather than replace) | L Apply to the Tree (ie named directory and all subdirs) L Directory to modify Roger -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -----Original Message----- From: Abbiss, Mark [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 17, 2003 8:25 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Editing directory permissions well looking at the minimal help file that comes with Xcacls I am not 100% certain if it does or does not do what I want. Subinacl certainly does not appear to do it. Let me elaborate We have users homeshares in the following structure x:\users\ ---- \USER1 ---- \USER2 ---- \USER3 ---- \USER. ---- \USERn The top level directory has permissons for administrators, backup operators and for our quota management software. Unfortunately, when some of the�user directories underneath were created they were not created with inheritence set. The consequence is that the quota software was not given rights to set new values on these user directories. I would like to simple run a command that will go down all the user directories and ADD the quota software account to the permissions for each user. I would like all the current security settings to remain untouched. Have I misunderstood the xcacls help and it will in fact be able to do this ?? Or can I use another utility ? Many thanks. -----Original Message----- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 17. September 2003 14:14 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Editing directory permissions xcacls and subinacl, both from the reskit, would be where I start. Is it just a question of syntax or is it not capable of doing what you need done? If those two wouldn't fit the bill, I'd probably write a script to handle it. Something like Hyena might also do the trick, too. Roger -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -----Original Message----- From: Abbiss, Mark [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 17, 2003 5:55 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Editing directory permissions Please can anyone recommend a good utility (not xcacls) that will help me add additional security permissons to a directory structure on one of our W2K servers. I want the existing ACL info to remain but want to append another set. Many thanks, Mark List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
