Yep - Security Explorer is a great tool - not cheap, but it does some things that literally nothing else does. Unless, however, someone else has come across something that will. Let's take the same example that Mark tossed out here...... x:\users\ ---- \USER1 ---- \USER2 ---- \USER3 ---- \USER. ---- \USERn
Let's say that Admin has access to the root, but the inheritance has been removed so that admin no longer has access to USER3 dir. How can I add the admin principal (or any principal and perms) back to this directory and force it down through the tree? Security Explorer does this - but it does it in a non-documented API manner... Love those, eh? Ideas? Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ayers, Diane Sent: Wednesday, September 17, 2003 10:54 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Editing directory permissions If you want a GUI, I recommend "Security Explorer" from Small Wonders. I've found it to be very useful at times Diane http://www.smallwonders.com/SecurityExplorer.htm -----Original Message----- From: Abbiss, Mark [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 17, 2003 2:55 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Editing directory permissions Please can anyone recommend a good utility (not xcacls) that will help me add additional security permissons to a directory structure on one of our W2K servers. I want the existing ACL info to remain but want to append another set. Many thanks, Mark List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
