I've used Security Explorer too and it is indeed good. If you don't want to spend the money on third party software, and for this case it seems a bit over the top. Why don't you create a dir list of just directories to a text file and use this as the input for the xacacls command
eg. for /i in (filename.txt) do xcacls %i /T /E /G domain\quotauser:F /Y Jacqui > from: Rick Kingslan <[EMAIL PROTECTED]> > date: Wed, 17 Sep 2003 22:25:13 > to: [EMAIL PROTECTED] > subject: RE: [ActiveDir] Editing directory permissions > > Yep - Security Explorer is a great tool - not cheap, but it does some things > that literally nothing else does. > > Unless, however, someone else has come across something that will. Let's > take the same example that Mark tossed out here...... > > x:\users\ > ---- \USER1 > ---- \USER2 > ---- \USER3 > ---- \USER. > ---- \USERn > > Let's say that Admin has access to the root, but the inheritance has been > removed so that admin no longer has access to USER3 dir. How can I add the > admin principal (or any principal and perms) back to this directory and > force it down through the tree? > > Security Explorer does this - but it does it in a non-documented API > manner... Love those, eh? > > Ideas? > > Rick Kingslan MCSE, MCSA, MCT > Microsoft MVP - Active Directory > Associate Expert > Expert Zone - www.microsoft.com/windowsxp/expertzone > > > > ________________________________ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Ayers, Diane > Sent: Wednesday, September 17, 2003 10:54 AM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Editing directory permissions > > > If you want a GUI, I recommend "Security Explorer" from Small Wonders. I've > found it to be very useful at times > > Diane > > http://www.smallwonders.com/SecurityExplorer.htm > > -----Original Message----- > From: Abbiss, Mark [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 17, 2003 2:55 AM > To: '[EMAIL PROTECTED]' > Subject: [ActiveDir] Editing directory permissions > > > Please can anyone recommend a good utility (not xcacls) that will > help me add additional security permissons to a directory structure on one > of our W2K servers. I want the existing ACL info to remain but want to > append another set. > > Many thanks, > > Mark > > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
