|
Posted by =?Utf-8?B?U2hhd24=?= on June 28, 2007, 1:56 am
If you were Registered and logged in, you could reply and use other advanced thread options Sorry Roger for the delay. This problem has been put off for other issues.
I looked at the group policy, but I guess I need to be able to use a file
mask using wildcards (subfolder\*\*) that way I can target the specific
levels. I'm thinking the best way is just to setup a script and run it every
few hours to ensure that permissions are retained. Once I get the time, I'm
going to look at setting up the script. There's definitely not any visibly
available software out there to do this. The group policy thing is pretty
nice though, and may come in handy in this situation.
Thanks
"Roger Abell [MVP]" wrote:
>
> > Does anyone know of a software that could be helpful in maintaining
> > permissions on a Windows 2003 server? I have tried Universal Shield which
> > is
> > able to take a file mask such as C:\subfolder\*\*\ and modify some very
> > simple permissions, but it doesn't work out for my network. It's not
> > flexible enough. Really what I'm looking to do is the following:
> >
> > P:\subfolder -- No changes can be made to any subfolders within this
> > folder
> > P:\Subfolder\subfolder -- These subfolders can be changed, but can't be
> > moved
>
> But this contradicts the former.
> Evidently the former was to have been
> > P:\subfolder -- No changes can be made to first level subfolders within
> > this folder
>
>
> > P:\subfolder\subfolder\subfolder -- No changes can be made to any
> > subfolders
> > within this folder
> > P:\subfolder\subfolder\subfolder\subfolder --These subfolders can be
> > changed, but can't be moved
> >
> >
> > I am able to do the first 2, but there are so many subfolders in the
> > second
> > 2 that the maintnance appears to be a problem. Let me know if you know of
> > any suitable apps, that can do this.
> >
>
> You may be focusing on setting the permissions at the wrong location,
> well, not wrong really so much as inconvenient.
> You appear to be attempting to set the permissions for each
> P:\subfolder\subfolder\subfolder\subfolder directly on each.
> If instead you set the permissions on P:\subfolder\subfolder\subfolder
> set to apply to Subfolders (perhaps subfolders and files) then in one
> location you set the permissions identically for all of the individual
> P:\subfolder\subfolder\subfolder\subfolder folders.
>
> Have you looked at use of the Filesystem section in a Security Template
> (or GPO) ?
>
> Roger
>
>
>
|