That looks like it may work. Threw me off at first because it only adds Allow Special permissions which when you drill down shows all options selected. Anyway to do the same thing but actually have Full Control Allowed set?
[image: Inline image 2] [image: Inline image 1] On Wed, Jan 27, 2016 at 10:20 AM, Andrew S. Baker <[email protected]> wrote: > If you don't want to touch anything else, just change the command as > follows: > > icacls "\\fileserver\ShareA\*" /grant DOMAIN\FullAdmins:F /T > > Then, you'll add the necessary group either explicitly or via inheritance > as appropriate. > > > > > > > > > > > *ASB **http://XeeMe.com/AndrewBaker* <http://xeeme.com/AndrewBaker> > *Providing Virtual CIO Services (IT Operations & Information Security) for > the SMB market…* > > * GPG: *1AF3 EEC3 7C3C E88E B0EF 4319 8F28 A483 A182 EF3A > > > On Tue, Jan 26, 2016 at 3:02 PM, Eugene Lipsky <[email protected]> wrote: > >> I have a fileshare that I'd like to add a new security group to and give >> it full admin rights to all the subfolders/files without changing any of >> the existing permissions. So far I've been attempting to do this via the >> following icacls command: >> >> icacls "\\fileserver\ShareA\*" /grant DOMAIN\FullAdmins:(OI)(CI)(F) /T >> >> My issue is that a lot of the folders and subfolders (hundreds, multiple >> levels deep) have inheritance disabled and so permissions do not propagate >> down to those folders and their subfolders requiring running the same >> command on the level of those folders. I'm sure others have run into >> similar situation and I'm guessing may have developed scripts to parse all >> subfolders in a share with inheritance disabled to run a command against. >> If anyone has something handy or other suggestions besides having to >> re-design the fileshare I'd appreciate it. >> >> >> Thanks, >> Eugene >> > >
