|
Posted by Roger Abell [MVP] on March 3, 2006, 8:16 am
If you were Registered and logged in, you could reply and use other advanced thread options
Go to microsoft.com/downloads and search for xcacls.vbs as it
has greater flexibility than cacls.exe or xcacls.exe
Use xcacls.vbs /? for syntax, not just the KB you will see a
reference to, as the internal has some info omitted in the KB
If you cannot do it with repeated calls to xcacls.vbs then the
VBscript code would certainly provide example of how to
copy and replace a SD, how to hind and omit an ACE, so
you would only need to wrapper that in a folder recurse that
applies the routine to all files at each folder.
>I am try to automate the removal of the DENY - WRITE permissions for a
> specified AD group that has been explicitly applied to files.
>
> This must be done with the without touching the folder structure and
> inheritance must not be turned off
>
> The files are sitting in a hierarchical folder structure - that is 4
> folders
> deep, and there are multiple folders. They relate to dates - so the
> levels
> of the folders are:
>
> Top Level (Shared folder)
> Year (folder)
> Month (folder)
> Day (folder)
> File.file (Files)
>
> I have been experimenting with XCACLS, but am having difficulty in making
> it
> only look at the files - not the actual folders.
>
>
>
>
|