If you using Windows 2000 SP2, use Icacls to backup the ACLS then cacls,
if it blows up, just re=apply the ACL with ICACLS. 

Z

Edward E. Ziots
Netwok Engineer
Lifespan Organization
MCSE,MCSA,MCP,Security+,Network+,CCA
Phone: 401-639-3505

-----Original Message-----
From: Matthew McComas [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 05, 2008 10:49 AM
To: NT System Admin Issues
Subject: RE: need to remove "everyone" group from the ACL of a long list
of folders

Just a thought, but does it make a difference if the "Everyone" group
permission setting is inherited from the parent folder or does cacls or
xcacls know automatically to no longer inherit this setting, removing it
from the firstname.lastname folder even though it is inherited from
above?  Would I simply need to change my command to:

cacls d:\home /t /e /c /r "Everyone"

which according to the switch "/t" should traverse all sub-directories
and make the same change.

Seems a little risky though...if you mess up, it impacts 1100
sub-directories.

-----Original Message-----
From: matt [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 05, 2008 9:43 AM
To: NT System Admin Issues
Subject: Re: need to remove "everyone" group from the ACL of a long list
of folders

My working directory was wrong, so it no longer loops.  Now I have a new
problem...when I run this command:

cacls d:\home\firstname.lastname$ /t /e /c /r "Everyone"

which is intended to revoke access by the Everyone group (or remove it
entirely from the ACL) to this folder I get "access is denied".

I'm logged on with my domain admin account, which is a member of the
local administrator's account.  The local Administrator's group has full
controll access to the volume and all sub-folders.  I'm a bit
mystified...any ideas?
~ Upgrade to Next Generation Antispam/Antivirus with Ninja!    ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!    ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!    ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~

Reply via email to