You’ll need a recursive loop. Not too bad to write in a scripting language, but I don’t think you’ll find a simple shell command.
From: [email protected] [mailto:[email protected]] On Behalf Of Charles F Sullivan Sent: Friday, August 1, 2014 2:00 PM To: [email protected] Subject: [NTSysADM] Adding ACE to an Entire Directory Tree I’ve been dealing with NTFS permissions for years, but surprisingly the need for this has rarely come up: I need to grant full control permission to a group and it needs to propagate all the way down a directory tree. This means that it needs to apply to folders which aren’t inheriting permissions, and of course it needs to be done without resetting the entire ACL on any of the data. The account I use will have full control of the data all the way down the tree, so at least that is not an obstacle. So far I haven’t found a way to do this without using something like Security Explorer. Does anyone know of the right tool or method to use for this? I’m not able to find any switches within the “_cacls” commands. It seems to me that there’s got to be a way to do this without buying a utility. Maybe it’s there in front of me and I’m just not getting it. Thanks for any help with this.

