Just a thought, but does it make a difference if the "Everyone" group permission setting is inherited from the parent folder or does cacls or xcacls know automatically to no longer inherit this setting, removing it from the firstname.lastname folder even though it is inherited from above? Would I simply need to change my command to:
cacls d:\home /t /e /c /r "Everyone" which according to the switch "/t" should traverse all sub-directories and make the same change. Seems a little risky though...if you mess up, it impacts 1100 sub-directories. -----Original Message----- From: matt [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 05, 2008 9:43 AM To: NT System Admin Issues Subject: Re: need to remove "everyone" group from the ACL of a long list of folders My working directory was wrong, so it no longer loops. Now I have a new problem...when I run this command: cacls d:\home\firstname.lastname$ /t /e /c /r "Everyone" which is intended to revoke access by the Everyone group (or remove it entirely from the ACL) to this folder I get "access is denied". I'm logged on with my domain admin account, which is a member of the local administrator's account. The local Administrator's group has full controll access to the volume and all sub-folders. I'm a bit mystified...any ideas? ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
