I am seeking out an ACL manipulation tool that will let me set the "Read Attributes" permission on the root of a drive (no inheritance), that does not automatically apply the permission to sub-files/folders and also does not 'touch' every file on the server. I have tried the following tools, but ran into the issues noted:
Cacls - Does not support "Read Attributes" permission. Does not allow inheritance to be specified. However, cacls only modifies ACLs on the specified root drive and nothing more, so performance is very quick. Xcacls.vbs - Supports "Read Attributes" permission, and allows for proper control over inheritance. However, when setting the permission, this tool enumerates every single file on the drive, making the process extremely slow. Setacl.exe - Supports "read attributes" permission, and allows for proper control over inheritance. Unfortunately, it doesn't seem to set permissions properly on the root of a drive. FileACL.exe - Supports "read attributes" permission, and allows for proper control over inheritance. However, when setting the permission, this tool enumerates every single file on the drive, making the process extremely slow. Xcacls.exe - Does not support "read attributes" permission, and seems to insert ACE entries in a non-supported manner on Windows 2003 servers. Dacl.vbs - Does not support "read attributes" permission. Is anyone aware of any other tools available? Thanks! ----- Jay Sudowski // Handy Networks LLC Director of Technical Operations Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003 Hosting Solutions Tel: 877-70 HANDY x882 | Fax: 888-300-2FAX www.handynetworks.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
