I wish to clone and append. Domain users is a common SID so it cannot be used for cross domain acling, so I need to clone domain users and append another group everywhere domain users appears.
So the directory and files will have two groups ACL'd on it Domain users and new "group" and both sets of permissions can be utilised. I hope this is clearer. Mark -----Original Message----- From: "Dean Wells" <[EMAIL PROTECTED]> Date: Wed, 1 Jun 2005 09:39:07 To:"Send - AD mailing list" <[EMAIL PROTECTED]> Subject: RE: [ActiveDir] OT-Data ACLing My guess is you're missing what most are saying (with perhaps the exception of the 'Security Explorer' tool mentioned earlier as I'm not familiar with it), this can be done but likely requires an element of scripting. Are you trying to replace the existing ACE with a new security principal with identical permission or merely add a new ACE with some fixed permission or .... ? -- Dean Wells MSEtechnology * Email: [EMAIL PROTECTED] http://msetechnology.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Wednesday, June 01, 2005 9:24 AM To: [email protected] Subject: Re: [ActiveDir] OT-Data ACLing Cacls does not appear to perform this function either, Many thanks. Mark -----Original Message----- From: "Mark Parris" <[EMAIL PROTECTED]> Date: Wed, 1 Jun 2005 13:18:39 To:[email protected] Subject: Re: [ActiveDir] OT-Data ACLing I did no know calcs did this, been looking at xcacls ans scacls but no joy, will try, many thanks. Mark -----Original Message----- From: "Adams, Kenneth W \(Ken\)" <[EMAIL PROTECTED]> Date: Wed, 1 Jun 2005 08:59:24 To:<[email protected]> Subject: RE: [ActiveDir] OT-Data ACLing There is a built-in utility called cacls that can do this for you. Another utility is a commercial product called Security Explorer by Small Wonders Software. Ken Adams -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Wednesday, June 01, 2005 8:20 AM To: [email protected] Subject: [ActiveDir] OT-Data ACLing All, Does anyone know of a utility that can look at a directory and identify where data is permissioned by a certain group and then append another group to that location to enable the new group to be permissioned on that data too. Example: D: is permissioned with Domain users in multiple directories but Not in every directory, I wish to search the directories and where Domain Users appears and append another group to that location. I hope this is clear. Regards Mark List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
