I've always found fileacl to be a bit more reliable than subinacl is now...I think the comment earlier on about broken versions of subinacl is dead right....
2008/9/9 <[EMAIL PROTECTED]> > > "Michael B. Smith" <[EMAIL PROTECTED]> wrote on 09/08/2008 > 01:54:59 PM: > > > Takes about 10 minutes to process locally. I suspect you aren't > > waiting long enough. > > So here's another test. Apparently, SubInACL enumerates everything it > finds, so the more files/sub-directories, the longer it takes: > > > On another directory I am testing, there are 4 (main) sub-directories, 590M > in files. This is a user's home folder, and re-directed "My Documents". Took > 6 min, 16 seconds, just to display: > > ------------------------------------ > Z:\PHA Scripts>SubInACL /subdirectories \\server\users\username /DISPLAY > > ================================== > +File \\server\users\username > ================================== > /control=0x0 > /owner =domain\username > /primary group =domain\domain users > /audit ace count =0 > /perm. ace count =2 > /pace =pha.phila.gov\adamsne ACCESS_ALLOWED_ACE_TYPE-0x0 > CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 > Type of access: > Special acccess : -Read -Write -Execute -Delete -Change > Permissions -Take Ownership > Detailed Access Flags : > FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 > FILE_APPEND_DATA-0x4 > FILE_READ_EA-0x8 FILE_WRITE_EA-0x10 > FILE_EXECUTE-0x20 FILE_DELETE_CHILD-0x40 > FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 > DELETE-0x10000 READ_CONTROL-0x20000 > WRITE_DAC-0x40000 WRITE_OWNER-0x80000 > SYNCHRONIZE-0x100000 > /pace =builtin\administrators ACCESS_ALLOWED_ACE_TYPE-0x0 > CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 > Type of access: > Special acccess : -Read -Write -Execute -Delete -Change > Permissions -Take Ownership > Detailed Access Flags : > FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 > FILE_APPEND_DATA-0x4 > FILE_READ_EA-0x8 FILE_WRITE_EA-0x10 > FILE_EXECUTE-0x20 FILE_DELETE_CHILD-0x40 > FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 > DELETE-0x10000 READ_CONTROL-0x20000 > WRITE_DAC-0x40000 WRITE_OWNER-0x80000 > SYNCHRONIZE-0x100000 > > > Elapsed Time: 00 00:06:16 > Done: 1, Modified 0, Failed 0, Syntax errors 0 > Last Done : \\server\users\username > --------------------------------------------------- > > dir \\server\users\username /s > > Total Files Listed: > 633 File(s) 618,748,445 bytes > 143 Dir(s) 236,880,056,320 bytes free > > > --------------------------------------------------- > > That's ... going to make using this tool for displaying or taking ownership > impractical, especially across a network. And my script won't run correctly > on a Win2000 server (I've tried it). > > <SIGH> > > Need to hammer things out a bit more, I think ... > > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
