Icacls with the /t parameter should do what you’re looking for. However, this not only add the ACL for non inherited folders only, but will add the ACL to EACH file and folder. This can get messy (personal pet peeve), but should get the job done.
-Aakash Shah From: [email protected] [mailto:[email protected]] On Behalf Of Charles F Sullivan Sent: Friday, August 1, 2014 12:00 PM To: [email protected] Subject: [NTSysADM] Adding ACE to an Entire Directory Tree I’ve been dealing with NTFS permissions for years, but surprisingly the need for this has rarely come up: I need to grant full control permission to a group and it needs to propagate all the way down a directory tree. This means that it needs to apply to folders which aren’t inheriting permissions, and of course it needs to be done without resetting the entire ACL on any of the data. The account I use will have full control of the data all the way down the tree, so at least that is not an obstacle. So far I haven’t found a way to do this without using something like Security Explorer. Does anyone know of the right tool or method to use for this? I’m not able to find any switches within the “_cacls” commands. It seems to me that there’s got to be a way to do this without buying a utility. Maybe it’s there in front of me and I’m just not getting it. Thanks for any help with this.
