If you don't want to touch anything else, just change the command as follows:
icacls "\\fileserver\ShareA\*" /grant DOMAIN\FullAdmins:F /T Then, you'll add the necessary group either explicitly or via inheritance as appropriate. *ASB **http://XeeMe.com/AndrewBaker* <http://xeeme.com/AndrewBaker> *Providing Virtual CIO Services (IT Operations & Information Security) for the SMB market…* * GPG: *1AF3 EEC3 7C3C E88E B0EF 4319 8F28 A483 A182 EF3A On Tue, Jan 26, 2016 at 3:02 PM, Eugene Lipsky <[email protected]> wrote: > I have a fileshare that I'd like to add a new security group to and give > it full admin rights to all the subfolders/files without changing any of > the existing permissions. So far I've been attempting to do this via the > following icacls command: > > icacls "\\fileserver\ShareA\*" /grant DOMAIN\FullAdmins:(OI)(CI)(F) /T > > My issue is that a lot of the folders and subfolders (hundreds, multiple > levels deep) have inheritance disabled and so permissions do not propagate > down to those folders and their subfolders requiring running the same > command on the level of those folders. I'm sure others have run into > similar situation and I'm guessing may have developed scripts to parse all > subfolders in a share with inheritance disabled to run a command against. > If anyone has something handy or other suggestions besides having to > re-design the fileshare I'd appreciate it. > > > Thanks, > Eugene >
